This vulnerability in Google Chrome's WebMCP component allows bypassing the same origin policy due to insufficient policy enforcement. The affected versions are those prior to 151.0.7922.72. The same origin policy is a critical security control that restricts how documents or scripts loaded from one origin can interact with resources from another origin. Bypassing this policy could lead to unauthorized data access or manipulation. The vulnerability is classified as medium severity by Chromium security. The vendor advisory linked does not explicitly confirm if a fix is included in version 151.0.7922.72 or later.

Successful exploitation could allow a remote attacker to bypass the same origin policy, potentially leading to unauthorized access to sensitive information or interaction with web content from different origins. This undermines a fundamental web security mechanism, increasing risk of cross-origin attacks. However, no known exploits in the wild have been reported, and the severity is assessed as medium.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should update Google Chrome to version 151.0.7922.72 or later once confirmed to contain the fix. Until then, cautious handling of untrusted web content is advised.