CVE-2026-17977 is a vulnerability in Google Chrome's CSS handling that permits a remote attacker to bypass security policies and leak cross-origin data via a specially crafted HTML page. This affects Chrome versions before 151.0.7922.72. The Chromium project rates the severity as low. There is no CVSS score or detailed technical exploit information available in the provided data. No explicit patch or remediation details are included.

The vulnerability enables remote attackers to bypass CSS-related policies, resulting in the leakage of cross-origin data. This could potentially expose sensitive information from other origins within the browser context. However, the impact is rated low severity by the vendor, indicating limited risk or difficulty in exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions prior to 151.0.7922.72, updating to version 151.0.7922.72 or later is likely the intended remediation once officially released. Monitor official Chromium or Google Chrome security advisories for patch availability and apply updates promptly.