CVE-2026-17860

LowCVSS 3.3

Published: 30/07/2026(UTC)Updated: 03/08/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.08%

0th percentile - higher than 0% of all known CVEs

Summary

Insufficient validation of untrusted input in the Mobile component in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a malicious file.

Risk Assessment

An attacker could display fake content in the address bar, potentially leading to phishing attacks or credential theft.

Recommendation

It is recommended to immediately update Google Chrome on Android to version 151.0.7922.72 or later.

Original NVD description (English source)

Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a malicious file. (Chromium security severity: Medium)