CVE-2026-17955

Google Chrome versions prior to 151.0.7922.72 are vulnerable to insufficient validation of untrusted input in the Payments feature, enabling remote attackers to execute UI spoofing through specially crafted HTML pages. This could mislead users into providing sensitive information or performing unintended actions. Organizations that rely on Chrome for online transactions or sensitive operations should prioritize updating to mitigate potential exploitation.