CVE-2026-17954

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72

Description A policy bypass in the MHTML (MIME HTML) implementation allows a remote attacker to leak cross-origin data by using a specially crafted MHTML page. Cross-origin data leakage occurs when a site accesses data from a different origin than the one that served the page, violating the Same-Origin Policy (SOP), a fundamental security mechanism that prevents websites from interacting with data from other sites without permission.

Recommendations Update Google Chrome to version 151.0.7922.72 or later.