CVE-2026-17808

Analyzed Analyzed - Analysis Complete

Uninitialized Use in WebGL in Google Chrome on Android

Publication date: 2026-07-30

Last updated on: 2026-08-03

Assigner: Chrome

Description

Uninitialized Use in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-08-03

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17808

EUVD

EUVD-2026-50757

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-457	The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

Attack-Flow Graph

Executive Summary

This vulnerability involves an uninitialized use in WebGL within Google Chrome on Android. It allows a remote attacker to access cross-origin data by tricking a user into visiting a specially crafted HTML page.

Detection Guidance

This vulnerability is specific to Google Chrome on Android and involves uninitialized use in WebGL. Detection typically requires checking the Chrome version rather than running commands. Ensure your Chrome browser is updated to version 151.0.7922.72 or later to mitigate the issue.

Impact Analysis

An attacker could exploit this to steal sensitive data from other websites you visit, such as login credentials, personal information, or financial details, without your knowledge.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information, potentially resulting in legal penalties and reputational damage.

Mitigation Strategies

Update Google Chrome on Android to version 151.0.7922.72 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-17808. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70