Google Chrome versions before 151.0.7922.72 contain a vulnerability in the CSS implementation that permits remote attackers to perform UXSS attacks by injecting arbitrary scripts or HTML through crafted HTML pages. This vulnerability arises from improper handling of CSS, enabling cross-origin script or HTML injection. The vulnerability is identified as CVE-2026-17827 and is rated medium severity by Chromium security. No patch links or vendor advisories are provided in the data, and no exploits are currently known.

Successful exploitation allows remote attackers to inject arbitrary scripts or HTML into the context of trusted web pages, potentially leading to unauthorized actions or data exposure within the browser session. This is classified as a UXSS vulnerability with medium severity, indicating a moderate risk to users of affected Chrome versions.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a later one to remediate the vulnerability. Since this is a client-side browser vulnerability, updating the browser is the primary mitigation. No additional vendor advisory details are available to indicate alternative mitigations or temporary fixes.