CVE-2026-17759 is an uninitialized use vulnerability (CWE-457) in the codecs of Google Chrome before version 151.0.7922.72. It enables a remote attacker to obtain potentially sensitive information from process memory via a specially crafted HTML page. The vulnerability arises due to improper initialization of memory in the codec processing component, which may leak data to an attacker-controlled web page. The issue has been assigned medium severity by Chromium security but lacks a CVSS score and explicit patch information in the provided data.

A remote attacker can exploit this vulnerability by delivering a crafted HTML page to a victim using an affected version of Google Chrome. Successful exploitation could lead to disclosure of sensitive information from the browser's process memory. There is no indication of code execution or privilege escalation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the official fix once available. Until then, exercising caution with untrusted web content is advisable.