CVE-2026-17730

Analyzed Analyzed - Analysis Complete

Side-channel Information Leakage in Google Chrome Autofill

Publication date: 2026-07-30

Last updated on: 2026-07-31

Assigner: Chrome

Description

Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-07-31

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17730

EUVD

EUVD-2026-50681

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1300	The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to patterns in physically observable phenomena such as variations in power consumption, electromagnetic emissions (EME), or acoustic emissions.

Attack-Flow Graph

Executive Summary

This vulnerability is a side-channel information leakage issue in the Autofill feature of Google Chrome before version 151.0.7922.72. It allows a remote attacker to trick a user into performing specific UI gestures on a crafted HTML page, which can then leak sensitive cross-origin data.

Detection Guidance

Detection of this vulnerability requires checking the version of Google Chrome installed on your system. If the version is prior to 151.0.7922.72, the system is vulnerable. Use commands like 'google-chrome --version' or check via package manager (e.g., 'apt list --installed | grep chrome' on Debian-based systems).

Impact Analysis

If exploited, this vulnerability could allow an attacker to access or leak data from websites you visit, even if those sites are from different origins. This might include personal information, login credentials, or other sensitive data stored in forms or autofill fields.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using affected Chrome versions might face legal or regulatory penalties if user data is compromised due to this issue.

Mitigation Strategies

Update Google Chrome to version 151.0.7922.72 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-17730. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70