CVE-2026-17774 is a vulnerability in Google Chrome's Variations feature affecting versions before 151.0.7922.72. The vulnerability stems from insufficient validation of untrusted input, which could be exploited by an attacker in a privileged network position to trigger heap corruption through crafted network traffic. This vulnerability is associated with CWE-20 (Improper Input Validation). No CVSS score is available, and no official patch or remediation details have been provided in the input data.

An attacker with privileged network access could exploit this vulnerability to cause heap corruption in the affected Chrome versions. Heap corruption may lead to application crashes or potentially enable further exploitation depending on the context. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit exposure to privileged network attackers and apply general network security best practices. Monitor official Google Chrome security advisories for updates and patches addressing this vulnerability.