CVE-2026-17820 describes a vulnerability in Google Chrome's Autofill feature where insufficient policy enforcement permits a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability affects versions of Chrome prior to 151.0.7922.72. The issue arises from Autofill not properly enforcing policies that restrict data exposure across origins, potentially allowing unauthorized data leakage. The vulnerability is rated medium severity by Chromium security, but no CVSS score or detailed impact metrics are provided. No patch or remediation details are included in the source data.

The vulnerability allows a remote attacker to leak cross-origin data through the Autofill feature in affected versions of Google Chrome. This could lead to unauthorized disclosure of sensitive information stored or autofilled by the browser. The impact is limited to data leakage and does not indicate code execution or system compromise. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 151.0.7922.72 or later once available to remediate this issue.