CyberRota Analysis
AI-GeneratedA vulnerability in the Headless mode of Google Chrome prior to version 151.0.7922.72 allows remote attackers to bypass the same origin policy through a specially crafted HTML page. This could lead to unauthorized access to sensitive data or resources across different origins. Organizations using affected versions of Chrome, particularly those leveraging Headless mode for automated tasks, should prioritize updating to mitigate potential security risks.
CVE
CVE-2026-17883
Severity
MEDIUM
CVSS
6.5
EPSS
0.19%
Chrome
Original NVD Description
Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)