CVE-2026-17980
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
Risk Assessment
The risk involves potential cross-origin data leakage through user gesture manipulation, compromising data security.
Recommendation
It is recommended to update Google Chrome on Android to version 151.0.7922.72 or later and educate users about interaction risks.
Original NVD description (English source)
Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)