CVE-2026-17734 is a vulnerability in the Autofill implementation of Google Chrome versions before 151.0.7922.72. The flaw allows remote attackers to inject arbitrary scripts or HTML content through a specially crafted HTML page, leading to a Universal Cross-Site Scripting (UXSS) condition. This can potentially enable attackers to execute unauthorized scripts in the context of the affected browser, impacting user security and privacy. The vulnerability is classified as medium severity by Chromium security, but no CVSS score is provided. There is no explicit information on patch availability or vendor advisories in the provided data.

Successful exploitation of this vulnerability could allow a remote attacker to inject and execute arbitrary scripts or HTML in the context of the victim's browser session via the Autofill feature. This may lead to unauthorized actions or data exposure within the browser environment. However, no known exploits in the wild have been reported, and the impact is rated medium severity by the Chromium security team.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the fixed version 151.0.7922.72 or later once available. Until then, cautious handling of untrusted web content and disabling Autofill where feasible may reduce risk.