CVE-2026-17980

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.72

Description An inappropriate implementation in the user interface allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specific UI gestures while interacting with a crafted HTML page. Cross-origin data leakage refers to a situation where a malicious website gains access to information from a different origin (domain, protocol, or port) that should be protected by the Same-Origin Policy.

Recommendations Update Google Chrome on Android to version 151.0.7922.72 or later.