CVE Catalog
CVE-2026-17702
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
Inappropriate implementation in Skia allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Risk Assessment
Cross-origin data leakage can expose sensitive information from other websites, posing a serious security breach.
Recommendation
Update Google Chrome to version 151.0.7922.72 or later.
Original NVD description (English source)
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)