CVE-2026-17666

Analyzed Analyzed - Analysis Complete

Cryptographic Flaw in Google Chrome

Publication date: 2026-07-30

Last updated on: 2026-08-03

Assigner: Chrome

Description

Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. (Chromium security severity: High)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-08-03

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17666

EUVD

EUVD-2026-50792

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-325	The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.

Attack-Flow Graph

Executive Summary

This vulnerability is a cryptographic flaw in Google Chrome versions before 151.0.7922.72. It allows an attacker with a privileged network position to bypass access controls by exploiting malicious network traffic. The flaw has been rated as high severity by Chromium security team.

Detection Guidance

This vulnerability is a cryptographic flaw in Google Chrome prior to version 151.0.7922.72. To detect it, ensure your Chrome browser is updated to version 151.0.7922.72 or later. Check the version via chrome://settings/help or command line. If vulnerable, update immediately as no specific detection commands are provided.

Impact Analysis

If you use an affected Chrome version, an attacker could intercept or manipulate your network traffic to bypass security controls. This may lead to unauthorized access to sensitive data or systems, even if proper authentication is in place.

Compliance Impact

This vulnerability does not directly specify impacts on compliance standards like GDPR or HIPAA. However, cryptographic flaws that allow unauthorized access could potentially lead to data breaches, which may violate confidentiality requirements under these regulations.

Mitigation Strategies

Update Google Chrome to version 151.0.7922.72 or later to address the cryptographic flaw.

Hi! I’m here to help you understand CVE-2026-17666. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70