CVE-2026-17754 is a medium severity vulnerability in the Blink component of Google Chrome before version 151.0.7922.72. It involves an inappropriate implementation that enables a remote attacker to bypass the same origin policy by delivering a specially crafted HTML page. The vulnerability impacts the integrity of web content by allowing unauthorized interactions across origins, violating the same origin policy. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no vendor advisory or patch information provided in the source data.

The vulnerability allows remote attackers to bypass the same origin policy, potentially enabling unauthorized modification of web content or interactions that should be restricted by origin boundaries. This compromises the integrity of web applications running in affected versions of Google Chrome. There is no direct impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the official fix once available. Until then, exercising caution with untrusted web content and limiting user interaction with suspicious pages may reduce risk.