CVE-2026-17859

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72

Description An inappropriate implementation in Favicons allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Cross-origin data leakage occurs when a website accesses data from a different origin than the one that served the page, bypassing security policies.

Recommendations Update Google Chrome to version 151.0.7922.72 or later.