CVE-2026-17766

LowCVSS 3.3

Published: 30/07/2026(UTC)Updated: 03/08/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page.

Risk Assessment

A local attacker can steal clipboard data, which may contain sensitive information such as passwords or personal data.

Recommendation

Update Google Chrome on Android to version 151.0.7922.72 or later.

Original NVD description (English source)

Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)