CVE-2026-17902 is a low-severity vulnerability affecting Google Chrome on Linux versions before 151.0.7922.72. It involves an inappropriate implementation in the editing feature that enables a remote attacker to leak cross-origin data by crafting a malicious HTML page. This vulnerability could lead to unauthorized data disclosure across origins. The vendor has published an advisory linked to a stable channel update but does not explicitly state the remediation level or patch availability in the provided data.

The vulnerability allows remote attackers to leak cross-origin data, potentially exposing sensitive information from other origins in the browser context. The impact is limited to data leakage and is rated low severity by the Chromium security team. There is no indication of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update Google Chrome on Linux to version 151.0.7922.72 or later once the fix is confirmed. Until then, no specific mitigation steps are provided.