CVE-2026-17742 is a vulnerability in Google Chrome's Payments feature affecting versions before 151.0.7922.72. The flaw arises from insufficient enforcement of security policies, which enables a remote attacker to leak data across origins via a specially crafted HTML page. This cross-origin data leakage could compromise user privacy or security by exposing information that should be isolated by the browser's same-origin policy. The vulnerability is classified as medium severity by Chromium security, but no CVSS score or detailed vendor advisory is currently available.

The vulnerability allows remote attackers to bypass policy restrictions in the Payments component of Google Chrome, leading to cross-origin data leakage. This could result in unauthorized disclosure of sensitive information accessible through the browser's payment APIs or related contexts. However, there are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 151.0.7922.72 or later once available to remediate this issue.