The vulnerability CVE-2026-17780 involves an inappropriate implementation in the Isolated Web Apps component of Google Chrome versions before 151.0.7922.72. It permits a remote attacker to bypass navigation restrictions through a specially crafted HTML page. This bypass could potentially allow navigation actions that are normally restricted by the browser's security model for isolated web applications. The issue is classified as medium severity by Chromium but lacks a CVSS score and detailed technical specifics in the provided data.

The impact is a medium-severity security bypass allowing remote attackers to circumvent navigation restrictions in isolated web apps. This could lead to unauthorized navigation behavior within the browser, potentially affecting the security boundaries intended by the isolated web app model. No further impact details or exploitation reports are available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to 151.0.7922.72, updating Google Chrome to version 151.0.7922.72 or later is recommended once official patches are released. Monitor official Chromium or Google Chrome security advisories for updates.