CVE-2026-17873 Google CVE debrief

Who should care

Users of Google Chrome for iOS, particularly those who browse the internet on their iOS devices, should apply the patch to update their browser to version 151.0.7922.72 or later. IT administrators and security teams responsible for managing Chrome deployments should prioritize this update and verify its application across their organizations. Additionally, security teams should review compensating controls and monitor for potential suspicious activity related to this vulnerability.

Technical summary

Insufficient policy enforcement in Chrome for iOS allowed a remote attacker to bypass discretionary access control via a crafted HTML page. This vulnerability has a medium security severity and a CVSS score of 6.5. It affects Google Chrome for iOS prior to version 151.0.7922.72. The vulnerability is caused by insufficient policy enforcement in Chrome for iOS, allowing remote attackers to bypass discretionary access control. Users should verify the patch has been applied and monitor for suspicious activity.

Defensive priority

Medium severity vulnerability in Google Chrome for iOS, allowing remote attackers to bypass discretionary access control.

Recommended defensive actions

• Apply the patch to update Google Chrome for iOS to version 151.0.7922.72 or later.
• Verify that the update has been applied successfully.
• Monitor for any suspicious activity related to this vulnerability.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

Insufficient policy enforcement in Chrome for iOS allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium. CVSS score: 6.5. The vulnerability affects Google Chrome for iOS prior to version 151.0.7922.72. Users should verify the patch has been applied and monitor for suspicious activity. Evidence is limited to publicly available sources and may not reflect the full scope of affected systems or potential impacts.

Official resources