This vulnerability (CVE-2026-17899) affects Google Chrome versions before 151.0.7922.72. It stems from insufficient policy enforcement in the DevTools feature, enabling an attacker who tricks a user into installing a crafted malicious extension to perform privilege escalation. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vulnerability is classified under CWE-693 (Protection Mechanism Failure).

Successful exploitation could allow an attacker to escalate privileges within the Chrome environment by leveraging a malicious extension installed by the user. This could lead to full compromise of the affected browser's security context, impacting confidentiality, integrity, and availability of user data and browser operations.

The vendor advisory linked indicates a stable channel update for desktop Chrome but does not explicitly confirm patch availability or remediation level. Given the affected version is prior to 151.0.7922.72, users should update to version 151.0.7922.72 or later to mitigate this vulnerability. Patch status is not yet confirmed explicitly in the advisory; users should verify the update status via the official Chrome release notes and apply updates promptly.