CVE-2026-17728 is a UXSS vulnerability in the Extensions implementation of Google Chrome before version 151.0.7922.72. It allows remote attackers to inject arbitrary scripts or HTML by leveraging an inappropriate implementation in the Extensions component via a crafted HTML page. This could enable script injection attacks that bypass same-origin policy protections. The vulnerability is classified as medium severity by the Chromium security team. No detailed technical or exploitation information is provided, and no patch or remediation details are included in the input data.

Successful exploitation of this vulnerability could allow a remote attacker to inject arbitrary scripts or HTML into the context of the browser's Extensions component, potentially leading to unauthorized script execution and bypass of same-origin policy protections. This could affect user security and privacy by enabling cross-site scripting attacks within the browser environment. However, no known exploits in the wild have been reported, and the severity is assessed as medium.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory content is provided, users and administrators should monitor official Google Chrome security bulletins for updates and apply the update to version 151.0.7922.72 or later once available to remediate this vulnerability.