The vulnerability CVE-2026-17945 in Google Chrome affects versions prior to 151.0.7922.72 and is caused by insufficient validation of untrusted input within the Navigation functionality. An attacker with control over the renderer process can exploit this to conduct UI spoofing attacks by crafting malicious HTML content. This could mislead users by displaying deceptive user interface elements. The Chromium security team has classified this vulnerability as low severity, indicating limited impact or exploitability.

The impact is limited to UI spoofing, which may deceive users into interacting with fraudulent interface elements. Exploitation requires prior compromise of the renderer process, thus the vulnerability does not enable initial remote code execution or privilege escalation by itself. There are no known exploits in the wild.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor.