SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-17774

HIGH · CVSS 7.5 EPSS 0.26% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-30 · Last synced 2026-08-29

CyberRota Analysis

AI-Generated

Google Chrome versions prior to 151.0.7922.72 are vulnerable due to insufficient validation of untrusted input in the Variations component, which could allow an attacker in a privileged network position to exploit heap corruption through crafted network traffic. This vulnerability poses a high risk as it could lead to remote code execution or other malicious activities. Organizations using affected Chrome versions should prioritize updating to mitigate potential exploitation risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-17774
Severity
HIGH
CVSS
7.5
EPSS
0.26%
Chrome

Original NVD Description

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)