CVE-2026-17765 in Chrome
Summary
by MITRE • 07/30/2026
Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 07/30/2026
This vulnerability represents a critical cross-origin data leakage issue within Google Chrome's WebProtect feature, specifically affecting versions prior to 151.0.7922.72. The flaw stems from an inadequate implementation of security controls that should have prevented unauthorized access to data across different origin boundaries. The vulnerability operates under the chromium security severity classification of medium, indicating a significant risk that could be exploited by attackers who have already compromised a renderer process, which represents a sophisticated attack vector requiring initial system compromise.
The technical execution of this vulnerability relies on a crafted HTML page that leverages the compromised renderer process to access cross-origin data that should normally be restricted by browser security policies. This type of flaw typically falls under the CWE-200 category of "Exposure of Sensitive Information" and may also relate to CWE-1236 "Use of Untrusted Input in a Web Session ID" or similar cross-origin resource sharing violations. The vulnerability demonstrates a breakdown in Chrome's security model where the renderer process, which should be isolated from other origins, can be manipulated to bypass these isolation mechanisms.
The operational impact of this vulnerability extends beyond simple data leakage as it represents a potential escalation path for attackers who have already gained initial access to a system. Attackers could leverage this weakness to gather sensitive information from other domains or applications running within the same browser instance, potentially leading to credential theft, session hijacking, or access to confidential business data. This vulnerability particularly affects users of older Chrome versions where security patches have not yet been applied, creating an exploitable attack surface that could be targeted in advanced persistent threat campaigns.
Mitigation strategies for this vulnerability require immediate patching of affected Chrome installations to version 151.0.7922.72 or later, which would contain the necessary security fixes to prevent cross-origin data leakage through the WebProtect implementation. Organizations should also implement network monitoring to detect potential exploitation attempts and ensure that automated patch management systems are operational to prevent such vulnerabilities from remaining unaddressed. The attack pattern aligns with ATT&CK technique T1059.007 for browser script execution and potentially T1566 for initial access through malicious web content, making it a critical concern for security operations centers monitoring for sophisticated web-based attacks.