The vulnerability CVE-2026-17945 affects Google Chrome versions before 151.0.7922.72. It stems from insufficient validation of untrusted input in the Navigation feature, enabling a remote attacker with control over the renderer process to conduct UI spoofing attacks via crafted HTML content. This could mislead users by displaying deceptive user interface elements. The Chromium security team has assigned a low severity rating to this issue. No CVSS score or detailed remediation information is provided in the available data. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation steps.

A remote attacker who has already compromised the renderer process can exploit this vulnerability to perform UI spoofing, potentially misleading users by presenting deceptive interface elements. The impact is considered low severity, indicating limited risk or difficulty in exploitation. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official fixes or updates are confirmed, users should remain cautious of untrusted content and ensure their Chrome installations are kept up to date.