This vulnerability involves insufficient policy enforcement in the Bluetooth component of Google Chrome before version 151.0.7922.72. An attacker with control over the renderer process can bypass the same origin policy by using a specially crafted HTML page. The same origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. The lack of enforcement in this context could allow unauthorized cross-origin interactions. The vulnerability is categorized as low severity by Chromium security. No CVSS score or explicit remediation level is provided. The vendor advisory URL is available but does not specify patch or mitigation details in the provided data.

The impact is limited to scenarios where an attacker has already compromised the renderer process in Chrome. Under these conditions, the attacker can bypass the same origin policy via crafted HTML content, potentially enabling unauthorized cross-origin interactions. However, the overall severity is low, indicating limited risk or difficulty in exploitation. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Since the affected version is explicitly stated as =151.0.7922.72, users should ensure they are running this version or later. No additional mitigation recommendations are provided in the input data.