This vulnerability (CVE-2026-17975) affects Google Chrome on Mac platforms before version 151.0.7922.72. It arises from an inappropriate implementation in the IME component, which can be exploited remotely via a specially crafted HTML page to leak potentially sensitive information from process memory. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impact limited to confidentiality. The vulnerability is categorized under CWE-200 (Exposure of Sensitive Information).

An attacker who successfully exploits this vulnerability can obtain potentially sensitive information from the memory of the Chrome process on affected Mac systems. The impact is limited to confidentiality; there is no impact on integrity or availability. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious content that could trigger the vulnerability.