CVE-2026-17851 is a side-channel information leakage vulnerability in the Autofill component of Google Chrome before version 151.0.7922.72. An attacker with control over the renderer process can exploit this flaw to leak data across origins using a specially crafted HTML page. The vulnerability is associated with CWE-1300 (Side Channel). There is no CVSS score or detailed vendor advisory provided in the input data. No known exploits in the wild have been reported.

The vulnerability allows an attacker who has already compromised the renderer process to leak sensitive cross-origin data via the Autofill feature. This could lead to unauthorized disclosure of information that should be isolated by origin boundaries. The impact is limited to scenarios where the renderer process is compromised, and the attacker can execute crafted HTML content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The input data indicates the vulnerability affects versions prior to 151.0.7922.72, implying that updating to version 151.0.7922.72 or later may address the issue. Until official confirmation is available, users should monitor vendor communications for an official fix.