This vulnerability (CVE-2026-17769) affects Google Chrome versions before 151.0.7922.72 and arises from insufficient validation of untrusted input in the Cast feature. An attacker can exploit this flaw by crafting a malicious HTML page to leak cross-origin data, violating the same-origin policy. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low complexity, no privileges required, user interaction required, unchanged scope, and limited confidentiality impact. There is no indication of integrity or availability impact. The vendor advisory URL is provided but does not explicitly state patch availability or remediation instructions.

The vulnerability allows remote attackers to leak cross-origin data, potentially exposing sensitive information from other origins. It does not affect data integrity or system availability. The impact is limited to confidentiality leakage through the Cast component in Chrome.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official confirmation, users should update to Chrome version 151.0.7922.72 or later once available. No other specific mitigations are provided by the vendor advisory.