CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome's Extensions prior to version 151.0.7922.72 allows remote attackers to inject arbitrary scripts or HTML through a specially crafted HTML page, leading to potential user experience security issues (UXSS). This could enable attackers to manipulate web content or steal sensitive information from users. Organizations using affected versions of Chrome should prioritize updating to mitigate the risk of exploitation.
CVE
CVE-2026-17728
Severity
MEDIUM
CVSS
5.4
EPSS
0.29%
Chrome
Original NVD Description
Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)