The vulnerability identified as CVE-2026-17982 involves insufficient validation of untrusted input within the Cast feature of Google Chrome versions before 151.0.7922.72. This flaw enables a remote attacker to bypass the same origin policy, a critical security control that restricts how documents or scripts loaded from one origin can interact with resources from another origin. The attack vector involves a crafted HTML page that exploits this validation weakness. No CVSS score is provided, but the Chromium security team classifies the severity as low.

An attacker could bypass the same origin policy, potentially allowing limited unauthorized interactions between web origins. However, the low severity rating indicates the impact is likely limited in scope or difficulty to exploit, and may not lead to significant data exposure or system compromise.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a more recent release to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.