CVE Catalog
CVE-2026-17720
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.14%
3th percentile - higher than 3% of all known CVEs
Summary
Insufficient policy enforcement in the Passwords component in Google Chrome prior to 151.0.7922.72. A remote attacker who had compromised the renderer process could leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk for the organization is the possibility of cross-origin data leakage, which could compromise user information confidentiality.
Recommendation
It is recommended to immediately update Google Chrome to version 151.0.7922.72 or later.
Original NVD description (English source)
Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)