CVE-2026-17945 Other in Chrome

Medium 4.3 Published Updated

A remote attacker with compromised renderer access can perform UI spoofing in Google Chrome via a crafted HTML page.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
Available

What is CVE-2026-17945?

CVE-2026-17945 is a medium-severity vulnerability in Google Chrome, published on 30 Jul 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Weakness: CWE-451

Which versions are affected by CVE-2026-17945?

It affects 1 product.

Products include Google Chrome.

How do I fix CVE-2026-17945?

Upgrade to a fixed version.

Is CVE-2026-17945 being exploited?

There is no known exploitation of CVE-2026-17945 in the wild and no public exploit code.

All Google Chrome vulnerabilities

Sources

Also known as DEBIAN-CVE-2026-17945, ECHO-a21c-c0f3-6d03, GHSA-g28r-c3hv-v5r3, MINI-3v6x-74hg-479r.

Is CVE-2026-17945 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free