CVE-2026-17755 is a vulnerability in Google Chrome's Extensions UI prior to version 151.0.7922.72. The vulnerability arises from incorrect security UI implementation, enabling an attacker to spoof the user interface by convincing a user to install a malicious extension. This UI spoofing can mislead users about the extension's permissions or actions, potentially facilitating further attacks. The vulnerability has a CVSS 3.1 base score of 4.3 (medium severity), with no known exploits in the wild. It does not affect confidentiality or availability but impacts integrity due to UI deception. No patch or remediation information is provided in the available data.

The vulnerability allows an attacker to perform UI spoofing via a malicious Chrome extension, potentially misleading users about extension permissions or actions. This can result in integrity issues by tricking users into trusting malicious extensions. There is no direct impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome to version 151.0.7922.72 or later once the update is available. Until then, users should exercise caution when installing extensions, especially those from untrusted sources.