CVE-2026-17907: Side-channel information leakage in Google Chrome
A side-channel information leakage vulnerability exists in the Network component of Google Chrome prior to version 151.0.7922.72. This flaw allows a remote attacker to leak cross-origin data by tricking a user into visiting a crafted HTML page. The vulnerability has a CVSS score of 4.3, indicating medium severity, and does not impact integrity or availability. No known exploits in the wild have been reported. Google has released Chrome version 151.0.7922.72 which addresses this issue.
AI Analysis
Technical Summary
CVE-2026-17907 is a side-channel information leakage vulnerability in the Network component of Google Chrome before version 151.0.7922.72. It enables a remote attacker to leak cross-origin data by leveraging crafted HTML content. The vulnerability is rated as low severity by Chromium security but has a medium CVSS score of 4.3 due to its potential confidentiality impact. The flaw requires user interaction (UI:R) and can be exploited remotely without privileges. Google published a stable channel update (version 151.0.7922.72) that fixes this issue.
Potential Impact
An attacker can remotely leak cross-origin data from a user's browser by exploiting this side-channel vulnerability. The impact is limited to confidentiality (partial data leakage) without affecting integrity or availability. No known active exploitation has been reported.
Mitigation Recommendations
Users and administrators should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. No other mitigation or temporary workaround is indicated by the vendor advisory.
CVE-2026-17907: Side-channel information leakage in Google Chrome
Description
A side-channel information leakage vulnerability exists in the Network component of Google Chrome prior to version 151.0.7922.72. This flaw allows a remote attacker to leak cross-origin data by tricking a user into visiting a crafted HTML page. The vulnerability has a CVSS score of 4.3, indicating medium severity, and does not impact integrity or availability. No known exploits in the wild have been reported. Google has released Chrome version 151.0.7922.72 which addresses this issue.
CVSS v3.1
Score 4.3medium
Affected software
Chrome
pkg:github/chromium/chromiumRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-17907 is a side-channel information leakage vulnerability in the Network component of Google Chrome before version 151.0.7922.72. It enables a remote attacker to leak cross-origin data by leveraging crafted HTML content. The vulnerability is rated as low severity by Chromium security but has a medium CVSS score of 4.3 due to its potential confidentiality impact. The flaw requires user interaction (UI:R) and can be exploited remotely without privileges. Google published a stable channel update (version 151.0.7922.72) that fixes this issue.
Potential Impact
An attacker can remotely leak cross-origin data from a user's browser by exploiting this side-channel vulnerability. The impact is limited to confidentiality (partial data leakage) without affecting integrity or availability. No known active exploitation has been reported.
Mitigation Recommendations
Users and administrators should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. No other mitigation or temporary workaround is indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-07-27T23:36:56.211Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html","vendor":"Google"}]
Threat ID: 6a6aa0a29c2644c7f849b954
Added to database: 07/30/2026, 00:53:54 UTC
Last enriched: 08/06/2026, 17:56:53 UTC
Last updated: 09/12/2026, 10:01:29 UTC
Views: 45
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.