Threats Tagged 'cve-2026-17870'

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-17870 is a medium severity vulnerability in Google Chrome prior to version 151.0.7922.72. It involves insufficient validation of untrusted input in the Cast component, which could allow an attacker on the local network segment to leak cross-origin data via malicious network traffic. This vulnerability does not allow privilege escalation or denial of service but impacts confidentiality. No known exploits are reported in the wild. The vendor has published an advisory but has not explicitly stated the remediation status in the provided data.