CVE-2026-17868 is a privilege escalation vulnerability in Google Chrome's USB policy enforcement mechanism affecting versions before 151.0.7922.72. The vulnerability enables a remote attacker to escalate privileges through a specially crafted HTML page. The Chromium security team has classified this vulnerability as medium severity. No CVSS score or detailed technical exploit information is available. No vendor advisory or patch information is provided in the current data.

Successful exploitation could allow a remote attacker to escalate privileges on the affected system via a crafted HTML page, potentially leading to unauthorized actions or access beyond the attacker's original permissions. However, no known exploits in the wild have been reported, and the severity is assessed as medium by the Chromium security team.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to 151.0.7922.72, updating Google Chrome to version 151.0.7922.72 or later is recommended once official patches or updates are released by the vendor.