CVE-2026-17785 describes an uninitialized use vulnerability in the ANGLE graphics engine within Google Chrome versions prior to 151.0.7922.72. This flaw allows a remote attacker to craft an HTML page that can leak cross-origin data, potentially exposing sensitive information from other origins. The vulnerability arises from the use of uninitialized memory, which can lead to unintended data disclosure. The Chromium security team has assigned a medium severity rating to this issue. No detailed CVSS vector or score is available, and no public exploits have been observed. The vulnerability is specific to the ANGLE component and affects Chrome desktop browser versions before 151.0.7922.72.

Successful exploitation of this vulnerability can lead to leakage of cross-origin data, which may expose sensitive information from other websites or origins that the user has accessed. This compromises the confidentiality of data handled by the browser. There is no indication of remote code execution or system compromise. The impact is limited to information disclosure via crafted web content.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update affected Chrome installations to version 151.0.7922.72 or newer to remediate this vulnerability. Since this is a client-side browser vulnerability, patching the browser is the primary mitigation. No additional vendor advisory content was provided; therefore, patch status is inferred from the version information. No known exploits in the wild reduce immediate urgency but updating remains recommended.