CVE-2026-17980 is a low-severity vulnerability in Google Chrome on Android where an improper UI implementation permits a remote attacker to leak cross-origin data. Exploitation requires user interaction with specific UI gestures on a maliciously crafted HTML page. The affected version is prior to 151.0.7922.72. No detailed CVSS score or remediation level is provided in the available data. The vendor advisory link is provided but does not explicitly confirm patch status in the input data.

A remote attacker can leak cross-origin data by tricking a user into performing certain UI gestures on a malicious page. This could lead to unauthorized disclosure of information accessible within the browser context. The severity is assessed as low by Chromium security, indicating limited impact or difficulty in exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until an official fix is confirmed, users should avoid interacting with untrusted web content that may attempt to exploit UI gestures.