CVE Catalog
CVE-2026-17666
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
Cryptographic flaw in the Enterprise component of Google Chrome prior to 151.0.7922.72. An attacker in a privileged network position could bypass discretionary access control via malicious network traffic.
Risk Assessment
The risk involves potential bypass of access controls by a network attacker, which could lead to unauthorized resource access.
Recommendation
It is recommended to immediately update Google Chrome to version 151.0.7922.72 or later and review network configuration.
Original NVD description (English source)
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. (Chromium security severity: High)