CVE-2026-17826 is a vulnerability in Google Chrome for iOS versions before 151.0.7922.72. It involves an inappropriate implementation that enables a remote attacker to leak cross-origin data if a user is tricked into performing certain UI gestures on a maliciously crafted HTML page. This flaw compromises the browser's same-origin policy protections under specific user interaction conditions. The vulnerability is classified as medium severity by Chromium security but lacks a CVSS score and explicit patch information in the provided data.

The vulnerability allows unauthorized cross-origin data leakage, potentially exposing sensitive information from other web origins to an attacker. This can compromise user privacy and data confidentiality within the affected browser environment. However, exploitation requires user interaction with specific UI gestures, limiting the attack vector. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for iOS for updates and apply the update to version 151.0.7922.72 or later once available. Until then, caution users about interacting with untrusted web content that may attempt to exploit UI gesture-based vulnerabilities.