The vulnerability CVE-2026-17812 affects Google Chrome versions before 151.0.7922.72. It stems from an inappropriate implementation in the DigitalCredentials feature, enabling remote attackers to conduct UI spoofing attacks by crafting malicious HTML pages. This can cause the browser to display misleading interface elements, potentially tricking users. The CVSS v3.1 base score is 5.4 (medium severity) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, low confidentiality impact, no integrity impact, and low availability impact. There are no known exploits in the wild. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

Successful exploitation allows a remote attacker to perform UI spoofing, which can deceive users by presenting fake or misleading interface elements. This may lead to user confusion or trick users into unintended actions. The confidentiality impact is low, with no integrity impact and low availability impact. There are no reports of active exploitation.

The vendor has published a stable channel update advisory for Chrome (https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html). Although explicit patch availability is not stated in the provided data, the presence of a stable channel update strongly suggests that a fix is available in Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Patch status is not yet confirmed explicitly; check the vendor advisory for current remediation guidance.