CVE-2026-17833

Analyzed Analyzed - Analysis Complete

Inappropriate Passwords Implementation in Google Chrome

Publication date: 2026-07-30

Last updated on: 2026-08-03

Assigner: Chrome

Description

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-08-03

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17833

EUVD

EUVD-2026-50582

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-346	The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

Executive Summary

This vulnerability is an inappropriate implementation in Google Chrome's Passwords feature. It allows a remote attacker to access cross-origin data through a specially crafted HTML page. The issue was present in Chrome versions before 151.0.7922.72.

Detection Guidance

Detection requires checking the installed version of Google Chrome. Compare your version against 151.0.7922.72. On Windows, run 'wmic product get name, version | findstr Chrome'. On Linux, run 'google-chrome --version' or check via package manager like 'dpkg -l | grep chrome'.

Impact Analysis

If exploited, this vulnerability could allow an attacker to steal sensitive data like saved passwords or other cross-origin information from your browser sessions without your knowledge.

Compliance Impact

This vulnerability involves inappropriate implementation in Google Chrome's Passwords feature, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Such data leaks could potentially expose sensitive personal or health information, which may impact compliance with GDPR (if personal data is involved) or HIPAA (if protected health information is compromised). However, the provided CVE details do not specify confirmed compliance violations.

Mitigation Strategies

Update Google Chrome to version 151.0.7922.72 or later immediately. Disable automatic updates temporarily if needed, but prioritize patching. Avoid untrusted HTML pages until updated.

Hi! I’m here to help you understand CVE-2026-17833. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70