CVE-2026-17909 is a vulnerability in Google Chrome affecting Isolated Web Apps before version 151.0.7922.72. The vulnerability arises from insufficient validation of untrusted input, which can be exploited by a remote attacker to leak cross-origin data through crafted network traffic. The Chromium security team has assigned a low severity rating to this issue. There is no explicit patch or remediation level stated in the provided data, but the affected version is exactly 151.0.7922.72, suggesting that this version is vulnerable or the last known vulnerable version. The vendor advisory link is provided but does not explicitly confirm patch status in the input data.

The vulnerability allows a remote attacker to leak cross-origin data, which could lead to unauthorized disclosure of information between web origins. The impact is limited by the low severity rating, indicating that the exploitation risk or damage potential is minimal compared to higher severity vulnerabilities.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official confirmation, users should consider updating Chrome to the latest available version beyond 151.0.7922.72 if possible, as newer versions typically include security fixes.