CVE-2026-17951 is a heap buffer overflow vulnerability in the WebRTC implementation of Google Chrome versions before 151.0.7922.72. This vulnerability enables a remote attacker to cause an out-of-bounds memory read via a specially crafted HTML page. The CVSS v3.1 score is 8.8, indicating high impact with network attack vector, low attack complexity, no privileges required, user interaction required, and high confidentiality, integrity, and availability impacts. The vulnerability is publicly disclosed with a vendor advisory linked to a stable channel update, but explicit patch or remediation details are not provided in the input data.

Successful exploitation can lead to disclosure of memory contents beyond intended boundaries, potentially exposing sensitive information or causing application instability. The high CVSS score reflects significant confidentiality, integrity, and availability impacts. However, no active exploitation in the wild has been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should monitor for official updates and apply them promptly once available.