CVE-2026-17897 describes an inappropriate implementation in the ORB component of Google Chrome before version 151.0.7922.72. This flaw enables a remote attacker to leak data across origins by leveraging a specially crafted HTML page. The vulnerability is rated medium severity by Chromium security, indicating a moderate impact on confidentiality. No detailed exploitation techniques or impact scenarios are provided in the available data.

The vulnerability allows remote attackers to leak cross-origin data, potentially exposing sensitive information from other origins within the browser context. This compromises the confidentiality of data accessible via the browser but does not indicate direct code execution or privilege escalation.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a later release to remediate the vulnerability. No additional mitigation guidance is provided or required beyond applying the official update.