VULNERABILITY INTELLIGENCE

CVE-2026-17957

CVSS score3.1 LOW

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-07-30

Last modified2026-10-23

Description

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)