This vulnerability (CVE-2026-17797) involves an inappropriate implementation of CSS in Google Chrome versions before 151.0.7922.72. It enables remote attackers to perform UXSS attacks by injecting arbitrary scripts or HTML through crafted HTML pages. The issue is classified as Medium severity by the Chromium security team. There is no CVSS score available, no known exploits in the wild, and no explicit patch or remediation information provided in the source data.

Successful exploitation could allow an attacker to inject arbitrary scripts or HTML into the context of the affected browser, potentially leading to unauthorized actions or data exposure within the user's browsing session. The severity is rated Medium by the Chromium security team. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects Google Chrome prior to version 151.0.7922.72, updating to version 151.0.7922.72 or later is likely recommended once official information is available. Monitor official Chromium or Google Chrome security advisories for updates and apply patches promptly when released.