The vulnerability CVE-2026-17905 involves an inappropriate implementation in the SurfaceCapture feature of Google Chrome before version 151.0.7922.72. This flaw enables a remote attacker to leak data across origins by leveraging a specially crafted HTML page. The Chromium security team has assigned this issue a low severity rating. There is no CVSS score available, and no explicit patch or vendor advisory information is provided in the input data.

The impact is limited to cross-origin data leakage, which could allow an attacker to access information from other origins that should be isolated. The severity is considered low by the Chromium security team, indicating limited risk or difficulty in exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor updates from Google Chrome for version 151.0.7922.72 or later that address this issue.