The vulnerability (CVE-2026-17928) involves an inappropriate implementation in the DataTransfer component of Google Chrome before version 151.0.7922.72. This flaw permits a remote attacker to leak data across origins by leveraging a specially crafted HTML page. The Chromium security team assessed the severity as low, indicating limited impact or exploitability. No CVSS score is provided, and no detailed technical exploitation methods are described in the available data.

The impact is limited to potential cross-origin data leakage via crafted HTML content in affected versions of Google Chrome prior to 151.0.7922.72. This could allow unauthorized access to data that should be restricted by same-origin policy. However, the low severity rating suggests the risk or exploitability is minimal. There are no reports of active exploitation in the wild.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or newer to remediate the vulnerability. Since this is a client-side browser vulnerability, updating the browser is the primary mitigation step. No additional vendor advisory content was provided, so patch status is inferred from the version information.