This vulnerability (CVE-2026-17882) affects Google Chrome versions before 151.0.7922.72 and involves a policy bypass in the Extensions component. An attacker who persuades a user to install a crafted malicious extension can bypass Chrome's site isolation security feature. Site isolation is a security mechanism designed to separate different sites into different processes to prevent malicious code from accessing data across sites. The vulnerability is classified under CWE-693 (Protection Mechanism Failure) and has a CVSS v3.1 base score of 6.5 (medium severity), indicating a network attack vector with low attack complexity, no privileges required, user interaction needed, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

The impact of this vulnerability is that an attacker can bypass site isolation protections in Chrome by leveraging a malicious extension installed by the user. This could allow the attacker to interfere with the integrity of browser processes or data that are normally isolated. There is no direct confidentiality or availability impact reported. No known active exploits have been observed in the wild.

The vendor advisory URL is provided but does not explicitly state the availability of a patch or remediation level. Since the vulnerability affects versions prior to 151.0.7922.72, updating to version 151.0.7922.72 or later is the recommended mitigation. Users should avoid installing untrusted or suspicious Chrome extensions to reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.