The vulnerability (CVE-2026-17833) involves an inappropriate implementation in the password handling component of Google Chrome before version 151.0.7922.72. This flaw enables a remote attacker to leak data across origins by using a specially crafted HTML page. The vulnerability is rated medium severity by the Chromium security team. No CVSS score or detailed technical exploitation methods are provided. The affected versions are implied to be all versions prior to 151.0.7922.72. No vendor advisory or patch information is included in the provided data.

An attacker can remotely cause cross-origin data leakage through a crafted HTML page due to improper password implementation. This could lead to unauthorized disclosure of sensitive information from different origins within the browser context. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to 151.0.7922.72, updating to version 151.0.7922.72 or later is likely to remediate the issue once confirmed by the vendor. Monitor official Google Chrome security advisories for updates and apply patches promptly when available.