CVE-2026-17764 is a medium severity vulnerability in Google Chrome's FedCM feature that allows a remote attacker to bypass the same origin policy via a crafted HTML page. This affects Chrome versions prior to 151.0.7922.72. The vulnerability arises from an inappropriate implementation of FedCM, which is a federated credential management API. No detailed exploitation methods or impact beyond the bypass of same origin policy are described in the available data.

The vulnerability enables a remote attacker to bypass the same origin policy in affected versions of Google Chrome. This could potentially allow unauthorized access to web resources or data that should be isolated by origin boundaries. The exact impact depends on how the bypass is leveraged but is generally considered a medium severity security risk.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update affected Chrome installations to version 151.0.7922.72 or newer to remediate this vulnerability. No additional mitigation guidance is provided in the available data.