The vulnerability identified as CVE-2026-17815 involves insufficient policy enforcement in the GuestView feature of Google Chrome versions before 151.0.7922.72. This flaw permits a remote attacker to leak cross-origin data by delivering a specially crafted HTML page, potentially exposing sensitive information across origins. The issue has been assigned a Medium severity level by the Chromium security team. There is no CVSS score or detailed exploit information available at this time.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of cross-origin data within the browser, potentially exposing sensitive information to an attacker. However, there are no known active exploits in the wild, and the impact is limited to data leakage rather than code execution or system compromise.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a newer release to remediate the vulnerability. Since this is not a cloud service, patching the client software is required to mitigate the risk. No additional vendor advisory content is provided; therefore, check official Google Chrome release notes for confirmation and further guidance.