CVE-2026-17674

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72

Description An inappropriate implementation in HTML allows a remote attacker to bypass the content security policy (CSP), which is a security layer used to detect and mitigate certain types of attacks, such as cross-site scripting (XSS) and data injection, by restricting the sources from which content can be loaded. This bypass is achieved through the use of a crafted HTML page.

Recommendations Update Google Chrome to version 151.0.7922.72 or later.