PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-17927 Google CVE debrief

CVE-2026-17927 is a Medium severity vulnerability in Google Chrome prior to version 151.0.7922.72, affecting DevTools. An attacker who convinces a user to install a malicious extension can leak cross-origin data via a crafted Chrome Extension due to insufficient policy enforcement. Defenders responsible for managing Google Chrome deployments should assess exposure, verify Chrome versions, review DevTools configuration, and monitor for suspicious extension installations to prevent exploitation.

Vendor
Google
Product
Chrome
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-30
Original CVE updated
2026-10-23
Advisory published
2026-07-30
Advisory updated
2026-10-23

Who should care

Defenders responsible for managing Google Chrome deployments, particularly those using DevTools or concerned with cross-origin data leakage, should assess exposure and verify Chrome versions.

Why it matters

CVE-2026-17927 is a Medium severity vulnerability in Google Chrome that allows cross-origin data leakage via crafted Chrome Extensions. Defenders should verify Chrome versions, review DevTools configuration, and monitor for suspicious extension installations to prevent exploitation.

  • Potential cross-origin data leakage
  • Verification of Chrome version and DevTools configuration required
  • Monitoring for suspicious extension installations necessary

Technical summary

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. This vulnerability affects Google Chrome deployments using DevTools, and defenders should verify Chrome versions and review DevTools configuration to prevent exploitation.

Defensive priority

Defenders should prioritize verifying Chrome versions and ensuring that DevTools is properly configured to prevent exploitation.

Recommended defensive actions

  • Verify Chrome version and ensure it is 151.0.7922.72 or later
  • Review DevTools configuration to prevent exploitation
  • Monitor for suspicious extension installations

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its Medium severity and the potential for cross-origin data leakage. The vulnerability affects Google Chrome prior to version 151.0.7922.72 and involves insufficient policy enforcement in DevTools. Defenders should verify Chrome versions, review DevTools configuration, and monitor for suspicious extension installations. The CVE Program record (CVE-2026-17927) and NVD detail page offer source-provided metadata.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-17927 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-17927

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-17927 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-17927

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.