CVE-2026-17715
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Inappropriate implementation in the Passwords component in Google Chrome prior to 151.0.7922.72. A remote attacker who convinced a user to engage in specific UI gestures could leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk for the organization is the possibility of cross-origin data leakage through social engineering, which could compromise user data confidentiality.
Recommendation
It is recommended to immediately update Google Chrome to version 151.0.7922.72 or later and educate users about security.
Original NVD description (English source)
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)