The vulnerability identified as CVE-2026-17823 involves insufficient enforcement of security policies within the WebXR implementation in Google Chrome versions before 151.0.7922.72. This flaw permits a remote attacker to bypass the same origin policy, a critical browser security mechanism, by crafting a malicious HTML page. The same origin policy bypass could potentially allow unauthorized access to resources or data across different origins within the browser context. The issue is classified with medium severity by the Chromium security team. No detailed technical exploitation methods or impact scenarios are provided in the available data.

Successful exploitation of this vulnerability could allow a remote attacker to bypass the same origin policy in affected versions of Google Chrome, potentially leading to unauthorized access to web resources or data that should be isolated by origin boundaries. The exact impact depends on the attacker's ability to craft malicious content and the victim's interaction with it. No known exploits in the wild have been reported.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update affected Chrome installations to version 151.0.7922.72 or newer to remediate this vulnerability. Since no vendor advisory or patch links are provided, verify the update availability and remediation details from official Google Chrome security advisories.