CVE-2026-17743 describes an insufficient policy enforcement vulnerability in the ControlledFrame feature of Google Chrome versions before 151.0.7922.72. This flaw enables a remote attacker to bypass the browser's same origin policy by using a specially crafted HTML page. The vulnerability is categorized under CWE-346 (Origin Validation Error) and has a CVSS 3.1 base score of 6.5, indicating moderate severity. No patch or remediation details are included in the provided data, and no known active exploitation has been reported.

The vulnerability allows a remote attacker to bypass the same origin policy, potentially enabling unauthorized access to information or interactions that should be restricted by origin boundaries. The impact is limited to information integrity (high impact) without confidentiality or availability loss. No known exploits in the wild have been reported, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to 151.0.7922.72, updating to version 151.0.7922.72 or later is recommended once official confirmation is available. Monitor official Google Chrome security advisories for patch releases and apply updates promptly.