CVE-2026-17984 describes a low severity vulnerability in Google Chrome on Android before version 151.0.7922.72. The flaw arises from an inappropriate implementation in the browser that permits a local attacker to leak cross-origin data by using a specially crafted HTML page. This cross-origin data leak could potentially expose information that should be isolated between different web origins. The vulnerability affects the browser on Android devices and requires local attacker access. No CVSS score or detailed technical exploit information is provided.

The vulnerability allows a local attacker to bypass cross-origin data protections, leading to potential leakage of data from other origins within the browser context. This could result in unauthorized disclosure of sensitive information accessible in other browser contexts. The impact is rated low severity by the Chromium security team, indicating limited risk or difficulty in exploitation.

A fix is available in Google Chrome for Android version 151.0.7922.72 and later. Users should update to this version or a newer one to remediate the vulnerability. Since no vendor advisory or patch links are provided, users should verify the update availability through official Google Chrome channels. No additional mitigation steps are indicated.