CVE-2026-17936

Analyzed Analyzed - Analysis Complete

Inappropriate Implementation in Google Chrome DevTools

Publication date: 2026-07-30

Last updated on: 2026-08-03

Assigner: Chrome

Description

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-08-03

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17936

EUVD

EUVD-2026-50862

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
CWE-693	The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

Executive Summary

This vulnerability is in Google Chrome's DevTools where an inappropriate implementation allowed a remote attacker to bypass navigation restrictions. The attacker could trick a user into performing specific UI gestures via a crafted HTML page.

Detection Guidance

This vulnerability is specific to Google Chrome's DevTools and requires user interaction to exploit. Detection primarily involves checking the Chrome version and monitoring for suspicious UI gestures or navigation bypass attempts. No direct network or system commands are provided in the CVE details.

Impact Analysis

This vulnerability could allow an attacker to manipulate your browser's navigation, potentially leading to unauthorized actions or access to sensitive data if you interact with a malicious webpage.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a low-severity UI manipulation issue in Chrome's DevTools with no evidence of data exposure or privacy impact.

Mitigation Strategies

Update Google Chrome to version 151.0.7922.72 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-17936. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70