The Autofill implementation in Google Chrome versions before 151.0.7922.72 has an inappropriate design that can be exploited by a remote attacker to leak data from different origins via a specially crafted HTML page. This cross-origin data leak could potentially expose sensitive information stored or autofilled by the browser. The vulnerability is identified as CVE-2026-17777 and is rated medium severity by the Chromium security team. No further technical details or exploitation methods are provided in the available data.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of cross-origin data through the Autofill feature in affected Chrome versions. This may expose sensitive user information autofilled by the browser on different websites. There is no indication of remote code execution or privilege escalation from the provided information.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a later release to remediate the vulnerability. Since this is a client-side browser issue, updating the browser is the primary mitigation step. No vendor advisory content was provided to indicate alternative mitigations or that no action is required.