CVE-2026-17788

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72

Description An inappropriate implementation in Blink, the browser engine used by Google Chrome, allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-origin data leakage occurs when a malicious website accesses information from another site that should be protected by the Same-Origin Policy (SOP), a security mechanism that restricts how a document or script loaded by one origin can interact with a resource from another origin.

Recommendations Update Google Chrome to version 151.0.7922.72 or later.