CVE-2026-17973

Analyzed Analyzed - Analysis Complete

Inappropriate Implementation in Views in Google Chrome on Mac

Publication date: 2026-07-30

Last updated on: 2026-08-03

Assigner: Chrome

Description

Inappropriate implementation in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-08-03

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17973

EUVD

EUVD-2026-50899

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an inappropriate implementation in Google Chrome's Views feature on Mac. It allows a local attacker to access potentially sensitive information from process memory by tricking a user into visiting a crafted HTML page. The severity is rated as Low by Chromium.

Detection Guidance

This vulnerability is specific to Google Chrome on Mac prior to version 151.0.7922.72. Detection involves checking the installed Chrome version. On Mac, open Terminal and run: google-chrome --version. If the version is below 151.0.7922.72, the system is vulnerable.

Impact Analysis

If exploited, this vulnerability could allow an attacker with local access to your Mac to read sensitive data from Chrome's memory, such as passwords or browsing history. However, the attacker would need to already have local access to your system.

Compliance Impact

This vulnerability involves a local attacker obtaining sensitive information from process memory via a crafted HTML page. While it does not directly impact compliance with standards like GDPR or HIPAA, unauthorized access to sensitive data could potentially lead to violations if such data is involved.

Mitigation Strategies

Update Google Chrome on Mac to version 151.0.7922.72 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-17973. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70