CVE-2026-17767 is a vulnerability in Google Chrome's WebView on Android platforms before version 151.0.7922.72. It involves insufficient validation of untrusted input, which enables a remote attacker with control over the renderer process to leak cross-origin data by using a specially crafted HTML page. This vulnerability is classified under CWE-20 (Improper Input Validation). No CVSS score is provided, but Chromium's internal assessment categorizes it as medium severity.

An attacker who has already compromised the renderer process can exploit this vulnerability to leak data across origins, potentially exposing sensitive information that should be isolated by the same-origin policy. This could lead to privacy breaches or information disclosure within affected Android Chrome WebView environments.

A fix is available in Google Chrome for Android version 151.0.7922.72 and later. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update to affected devices. Patch status is not explicitly confirmed beyond the version mentioned; verify with the official vendor advisory for the latest remediation guidance.