The vulnerability CVE-2026-17786 affects Google Chrome versions before 151.0.7922.72. It stems from insufficient validation of untrusted input within the DevTools component. An attacker can exploit this by persuading a user to install a malicious Chrome extension, which then enables privilege escalation through crafted extension code. The issue is classified under CWE-20, indicating improper input validation. There is no CVSS score available, and no patch or remediation details have been provided in the source data. No known active exploitation has been reported.

Successful exploitation allows privilege escalation via a malicious Chrome extension installed by a user. This could lead to elevated permissions within the browser context, potentially enabling further malicious actions. However, exploitation requires user interaction to install the malicious extension. No evidence of active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the official fix once available. Until then, caution users against installing untrusted or suspicious Chrome extensions.