The vulnerability CVE-2026-17774 affects Google Chrome's Variations component before version 151.0.7922.72. It involves insufficient validation of untrusted input, which could be exploited by an attacker positioned within a privileged network to cause heap corruption through crafted network traffic. The CVSS 3.1 vector indicates the attack requires adjacent network access, high attack complexity, no privileges, no user interaction, and impacts confidentiality, integrity, and availability with high severity. The vendor advisory linked does not explicitly state the patch status or remediation level, so patch status is not confirmed.

Successful exploitation could lead to heap corruption, potentially allowing an attacker to execute arbitrary code or cause denial of service. The vulnerability impacts confidentiality, integrity, and availability of the affected system. However, exploitation requires the attacker to be in a privileged network position and the attack complexity is high.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is confirmed.