CVE-2026-17818 is an inappropriate implementation vulnerability in the Network component of Google Chrome before version 151.0.7922.72. It allows remote attackers to perform unauthorized script or HTML injection (UXSS) through crafted HTML pages. This vulnerability is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation), indicating a cross-site scripting issue. The CVSS 3.1 base score is 6.1, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity.

Successful exploitation could allow a remote attacker to inject arbitrary scripts or HTML content into the browser context, potentially leading to unauthorized actions or data exposure within the affected user's browsing session. The impact is limited to confidentiality and integrity with no availability impact. There are no known exploits in the wild at this time.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the official browser update. Patch status is confirmed by the version boundary in the description.