CVE-2026-17879 is a vulnerability in Google Chrome's Autofill implementation before version 151.0.7922.72. It allows a remote attacker to leak cross-origin data by crafting a malicious HTML page. This vulnerability is classified under CWE-346, indicating an authorization bypass or similar security control weakness. The vulnerability has a CVSS 3.1 base score of 4.3, reflecting a medium severity level. There is no explicit vendor advisory stating the patch status, but the affected versions are prior to 151.0.7922.72, implying the issue is fixed in that version.

An attacker can remotely cause leakage of cross-origin data through a crafted HTML page, potentially exposing sensitive information from other origins. The impact is limited to confidentiality loss without integrity or availability impact, as indicated by the CVSS vector (C:L/I:N/A:N). No known exploitation in the wild has been reported.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. Since the vendor advisory does not explicitly state the patch status, but the affected versions are prior to 151.0.7922.72, updating to this version is the recommended action. Monitor the official Google Chrome release blog for any further updates or guidance.