CVE-2026-17732

LowCVSS 3.1

Published: 30/07/2026(UTC)Updated: 03/08/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Risk Assessment

An attacker can steal sensitive cross-origin data, breaking browser isolation and potentially leading to session theft or credential leakage.

Recommendation

Update Google Chrome to version 151.0.7922.72 or later.

Original NVD description (English source)

Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)