CVE-2026-17942 is a side-channel information leakage vulnerability in Google Chrome's SVG handling that affects versions prior to 151.0.7922.72. An attacker can exploit this vulnerability remotely by delivering a specially crafted HTML page to leak cross-origin data, potentially violating the same-origin policy. The Chromium security team has rated this vulnerability as low severity. The vendor has published an advisory linked to a stable channel update, indicating that a fixed version is available at 151.0.7922.72.

The vulnerability allows remote attackers to leak cross-origin data via a crafted HTML page, which could lead to unauthorized disclosure of information across origins. The impact is considered low severity by the vendor, suggesting limited risk or difficulty in exploitation. There are no reports of active exploitation in the wild.

A fixed version of Google Chrome is available at 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client-side application, applying the update is the primary mitigation. No additional vendor-recommended mitigations are specified.