This vulnerability (CVE-2026-17973) affects Google Chrome on Mac versions before 151.0.7922.72. It arises from an inappropriate implementation in the Views component, which can be exploited by a local attacker through a crafted HTML page to access sensitive information from process memory. The CVSS 3.1 base score is 5.5, reflecting a medium severity with attack vector local, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact. There is no indication of integrity or availability impact. The vulnerability is categorized under CWE-200 (Exposure of Sensitive Information). The vendor advisory is linked but does not explicitly confirm patch status or remediation level in the provided data.

The vulnerability allows a local attacker to extract potentially sensitive information from the memory of the Chrome process on Mac systems. This compromises confidentiality but does not affect integrity or availability. The attack requires local access and user interaction, limiting remote exploitation. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until an official fix is confirmed, users should avoid executing untrusted local HTML content and follow standard security practices for local system access.