The Media Router implementation in Google Chrome versions before 151.0.7922.72 contains an inappropriate implementation that permits a remote attacker to bypass the same origin policy by delivering a specially crafted HTML page. This bypass could allow the attacker to access or manipulate content from different origins, violating web security boundaries. The vulnerability is identified as CVE-2026-17852 and is rated medium severity by Chromium security. No further technical details or exploitation methods are provided.

Successful exploitation of this vulnerability could allow a remote attacker to bypass the same origin policy, potentially leading to unauthorized access or manipulation of web content from different origins. This undermines a fundamental web security mechanism, possibly exposing sensitive information or enabling cross-origin attacks. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is provided in the input data, users should monitor official Google Chrome security channels for updates and apply the update to version 151.0.7922.72 or later once available to remediate this issue.