This vulnerability (CVE-2026-17773) in Google Chrome arises from insufficient validation of untrusted input within the Cast feature. An attacker can exploit this flaw by crafting a malicious HTML page that causes cross-origin data leakage, violating the same-origin policy. The vulnerability is classified under CWE-346 (Origin Validation Error). It affects Chrome versions before 151.0.7922.72. The CVSS v3.1 base score is 4.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, user interaction required, unchanged scope, and confidentiality impact only.

A remote attacker can leak cross-origin data by exploiting insufficient input validation in the Cast component of affected Chrome versions. This compromises confidentiality but does not affect integrity or availability. There are no known active exploits in the wild at this time.

The vulnerability affects Chrome versions prior to 151.0.7922.72. Users and administrators should update to version 151.0.7922.72 or later to remediate this issue. The vendor advisory linked does not explicitly confirm the patch status, so users should verify the update availability from official Chrome release notes. No additional mitigation steps are specified by the vendor.