CVE-2026-17756

Analyzed Analyzed - Analysis Complete

Insufficient Policy Enforcement in Google Chrome Presentation

Publication date: 2026-07-30

Last updated on: 2026-08-04

Assigner: Chrome

Description

Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-08-04

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17756

EUVD

EUVD-2026-50706

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-602	The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

Attack-Flow Graph

Executive Summary

This vulnerability is due to insufficient policy enforcement in Google Chrome's Presentation component. It allows a remote attacker to bypass navigation restrictions by tricking a user into visiting a specially crafted HTML page.

Detection Guidance

Detection requires checking the installed version of Google Chrome. If the version is prior to 151.0.7922.72, the system is vulnerable. Use commands like 'google-chrome --version' or check via package manager (e.g., 'apt list --installed | grep chrome' for Debian-based systems).

Inspect network traffic for unusual HTML page interactions or navigation bypass attempts, though this requires deeper analysis.

Impact Analysis

An attacker could exploit this to redirect you to malicious sites, phishing pages, or other harmful content without your knowledge. This could lead to data theft, malware infections, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability allows a remote attacker to bypass navigation restrictions via a crafted HTML page, which could potentially lead to unauthorized data access or manipulation. This may impact compliance with GDPR by risking unauthorized access to personal data and HIPAA by compromising protected health information if exploited in healthcare contexts.

Mitigation Strategies

Update Google Chrome to version 151.0.7922.72 or later immediately. Disable automatic updates temporarily if needed, but prioritize patching. Avoid untrusted HTML pages until patched.

Hi! I’m here to help you understand CVE-2026-17756. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70