Is CVE-2026-17926 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-17926

Description

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)