CVE-2026-17761: Insufficient validation of untrusted input in Google Chrome
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chromium security severity: Medium)
AI Analysis
Technical Summary
CVE-2026-17761 is an insufficient input validation vulnerability in Google Chrome on iOS versions before 151.0.7922.72. It enables remote attackers to perform unauthorized script or HTML injection (UXSS) via crafted network traffic. This vulnerability stems from improper handling of untrusted input, classified under CWE-20. The issue affects Chrome for iOS specifically and has been assigned a medium severity by Chromium security. No CVSS score or vendor advisory patch information is currently available.
Potential Impact
Successful exploitation could allow an attacker to inject arbitrary scripts or HTML content into the browser context, potentially leading to unauthorized actions or information disclosure within the affected browser session. However, no known exploits in the wild have been reported, and the impact is assessed as medium severity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome on iOS to version 151.0.7922.72 or later once available. Until then, cautious browsing and avoiding untrusted network traffic may reduce risk.
CVE-2026-17761: Insufficient validation of untrusted input in Google Chrome
Description
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chromium security severity: Medium)
Affected software
pkg:github/chromium/chromiumRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-17761 is an insufficient input validation vulnerability in Google Chrome on iOS versions before 151.0.7922.72. It enables remote attackers to perform unauthorized script or HTML injection (UXSS) via crafted network traffic. This vulnerability stems from improper handling of untrusted input, classified under CWE-20. The issue affects Chrome for iOS specifically and has been assigned a medium severity by Chromium security. No CVSS score or vendor advisory patch information is currently available.
Potential Impact
Successful exploitation could allow an attacker to inject arbitrary scripts or HTML content into the browser context, potentially leading to unauthorized actions or information disclosure within the affected browser session. However, no known exploits in the wild have been reported, and the impact is assessed as medium severity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome on iOS to version 151.0.7922.72 or later once available. Until then, cautious browsing and avoiding untrusted network traffic may reduce risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hmjv-q65w-xfr7
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-17761"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6ae51b9c2644c7f8982698
Added to database: 07/30/2026, 05:46:03 UTC
Last enriched: 07/30/2026, 06:34:27 UTC
Last updated: 07/31/2026, 02:51:53 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.