CVE-2026-17790 Google CVE debrief

Who should care

Users of Google Chrome on Windows, particularly those who handle sensitive information, should be aware of this vulnerability and take immediate action to update their browsers to prevent potential information disclosure. This includes administrators, security teams, and individuals who use Google Chrome for sensitive tasks. It is essential to prioritize updating browsers to prevent potential information disclosure and implement compensating controls to detect and prevent exploitation.

Technical summary

The CVE-2026-17790 vulnerability is caused by an uninitialized use in ANGLE in Google Chrome on Windows. This allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The vulnerability has a CVSS score of 4.3 and a severity of Medium. The affected version is prior to 151.0.7922.72. To address this vulnerability, it is essential to understand the potential impact and take steps to mitigate it. Users should update their browsers to the latest version and implement compensating controls, such as web application firewalls, to detect and prevent exploitation.

Defensive priority

Medium severity vulnerability in Google Chrome, requiring immediate attention to prevent potential information disclosure.

Recommended defensive actions

• Apply the patch to update Google Chrome to version 151.0.7922.72 or later.
• Restrict access to sensitive data and monitor for suspicious activity.
• Implement compensating controls, such as web application firewalls, to detect and prevent exploitation.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE-2026-17790 vulnerability is related to an uninitialized use in ANGLE in Google Chrome on Windows, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The vulnerability has a CVSS score of 4.3 and a severity of Medium. The affected version is prior to 151.0.7922.72.

Official resources