This vulnerability (CVE-2026-17945) affects Google Chrome versions before 151.0.7922.72. It is caused by insufficient validation of untrusted input in the Navigation component, which can be exploited by a remote attacker with control over the renderer process to conduct UI spoofing attacks using crafted HTML content. The issue is categorized under CWE-451 (Incorrect Expression of User Interface Element). The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and limited integrity impact. The vendor advisory linked is a Chrome stable channel update announcement but does not explicitly confirm patch availability or remediation details.

The impact of this vulnerability is limited to UI spoofing, which can mislead users by presenting deceptive interface elements. There is no direct confidentiality, availability, or significant integrity impact reported. Exploitation requires prior compromise of the renderer process and user interaction. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update announcement should be monitored for confirmation of a fix. Until an official fix is confirmed, users should exercise caution with untrusted content and ensure their Chrome installations are updated promptly once a patch is released.