CVE-2026-17792 is a medium severity vulnerability in Google Chrome's Credential Management implementation before version 151.0.7922.72. It allows remote attackers to conduct UI spoofing attacks by crafting malicious HTML pages that can deceive users. The vulnerability is identified as CWE-451 (Incorrect Expression of User Interface Element). There is no explicit vendor advisory stating the availability of a patch or remediation level, but the affected version is prior to 151.0.7922.72, implying that updating to this version or later mitigates the issue.

The vulnerability enables remote attackers to perform UI spoofing, potentially misleading users into interacting with deceptive user interface elements. This can compromise the integrity of user interactions but does not directly affect confidentiality or availability. There are no known exploits in the wild at this time.

Updating Google Chrome to version 151.0.7922.72 or later is recommended to remediate this vulnerability. The vendor advisory linked does not explicitly state the patch status, but the affected versions indicate that the issue is fixed in 151.0.7922.72. Users should ensure their browsers are updated to this version or newer to mitigate the risk.