The vulnerability CVE-2026-17755 affects Google Chrome versions before 151.0.7922.72. It involves incorrect security UI in the Extensions feature, enabling an attacker to spoof the user interface by tricking a user into installing a malicious extension. This UI spoofing could mislead users about the extension's legitimacy or permissions. The vulnerability is classified as medium severity by Chromium security. No CVSS score or detailed exploit information is available, and no explicit patch or remediation details are provided in the input data.

An attacker who successfully convinces a user to install a malicious Chrome extension can exploit this vulnerability to spoof the browser's security UI. This may lead to user deception regarding extension permissions or trustworthiness, potentially facilitating further malicious actions by the installed extension. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 151.0.7922.72 or later once available to address this issue.