CVE-2026-17797 is a medium severity UXSS vulnerability in Google Chrome versions before 151.0.7922.72 caused by inappropriate CSS implementation. This flaw allows remote attackers to inject arbitrary scripts or HTML by crafting malicious HTML pages, potentially leading to cross-origin script execution. The vulnerability has a CVSS 3.1 base score of 6.1, indicating a network attack vector with low attack complexity, no privileges required, but requiring user interaction. The impact includes limited confidentiality and integrity loss without availability impact. No patch links or vendor advisory details are provided in the input data.

Successful exploitation could allow remote attackers to execute arbitrary scripts or inject HTML in the context of the victim's browser session, potentially leading to information disclosure or manipulation of web content. The impact is limited to confidentiality and integrity with no availability impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is a vulnerability in a client application (Google Chrome), users should update to version 151.0.7922.72 or later once the patch is available. Until then, users should exercise caution when visiting untrusted or suspicious websites that could host crafted HTML content.