CVE-2026-17932 is a use-after-free vulnerability in the DataTransfer feature of Google Chrome on Windows platforms. It affects versions before 151.0.7922.72 and allows a local attacker to potentially read sensitive memory contents by leveraging a crafted HTML page. The vulnerability is rated medium severity with a CVSS 3.1 score of 5.5, reflecting local attack vector, low complexity, no privileges required, user interaction required, and high confidentiality impact. The flaw does not impact integrity or availability. Google has published a stable channel update that fixes this issue in Chrome version 151.0.7922.72.

An attacker with local access and the ability to trick a user into interacting with a malicious HTML page could gain access to sensitive information from Chrome's process memory. This could lead to information disclosure but does not affect integrity or availability of the browser or system. There are no reports of active exploitation in the wild.

Users should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. The vendor advisory confirms that this update addresses the issue. No additional mitigation steps are indicated.