CVE Catalog
CVE-2026-17997
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.10%
1th percentile - higher than 1% of all known CVEs
Summary
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Risk Assessment
Risk of cross-origin data leakage, potentially compromising passwords and other stored data.
Recommendation
Update Google Chrome to version 151.0.7922.72 or later.
Original NVD description (English source)
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)