CVE-2026-17923 Google CVE debrief

Who should care

IT and security teams responsible for managing Google Chrome deployments within their organizations should be aware of this vulnerability. This includes administrators who handle browser updates, security configurations, and navigation policies. Additionally, end-users who utilize Google Chrome for browsing should be informed about the importance of keeping their browser up-to-date.

Why it matters

CVE-2026-17923 is a medium-severity policy bypass vulnerability in Google Chrome that allows remote attackers to bypass navigation restrictions. Defenders should prioritize updating Chrome to version 151.0.7922.72 or later. This vulnerability requires verification of Chrome versions within the organization and adjustment of navigation policies as necessary. The exploitation of this vulnerability is limited by the need for user interaction and does not directly impact data confidentiality or integrity.

• An attacker could exploit this vulnerability to bypass navigation restrictions, potentially leading to unauthorized access to sensitive resources.
• Defenders need to verify if their Chrome deployments are using version 151.0.7922.72 or later to ensure they are not vulnerable.
• Successful exploitation requires user interaction, as the attacker needs to convince the user to visit a crafted domain.
• The impact of this vulnerability is primarily related to navigation and access control, rather than data confidentiality or integrity.

Technical summary

The CVE-2026-17923 vulnerability is a policy bypass issue in Google Chrome prior to version 151.0.7922.72. This vulnerability allows a remote attacker to bypass navigation restrictions via a crafted domain name. The issue is considered to have a medium severity with a CVSS score of 6.5. The vulnerability is related to CWE-693.

Defensive priority

Defenders should prioritize updating Google Chrome to version 151.0.7922.72 or later to mitigate this vulnerability. This is particularly important for organizations that manage Chrome deployments, as an attacker could exploit this policy bypass to manipulate navigation and potentially access unauthorized resources.

Recommended defensive actions

• Update Google Chrome to version 151.0.7922.72 or later
• Review and adjust navigation restrictions in Chrome deployments as necessary
• Monitor Chrome version usage within the organization to ensure compliance

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score and affected versions. However, there is limited information on potential exploitation or specific attack scenarios.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.