PT-2026-66164 · Google · Google Chrome

CVE-2026-17845

·

Published

2026-07-30

·

Updated

2026-08-02

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72
Description An improper implementation in the CSS component allows a remote attacker to perform Universal Cross-Site Scripting (UXSS) by using a crafted HTML page to inject arbitrary scripts or HTML.
Recommendations Update Google Chrome to version 151.0.7922.72 or later.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-17845
ECHO-6519-C297-1E82
OPENSUSE-SU-2026:11434-1
OPENSUSE-SU-2026:21514-1

Affected Products

Google Chrome