The vulnerability identified as CVE-2026-17760 involves side-channel information leakage in the NoStatePrefetch component of Google Chrome before version 151.0.7922.72. An attacker can exploit this flaw remotely by delivering a crafted HTML page that causes cross-origin data leakage. This issue is categorized under CWE-1300, indicating a side-channel vulnerability. No detailed technical exploitation methods or impact beyond data leakage are provided. The vulnerability has not been reported as exploited in the wild.

Successful exploitation of this vulnerability allows a remote attacker to leak data from different origins, potentially exposing sensitive information that should be isolated by the browser's same-origin policy. This could undermine user privacy and security by revealing cross-origin data through side-channel means.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the official fix once it is released. Until then, no specific mitigation steps are provided.