CVE-2026-17840: Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity
Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-17840
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-178400.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-17840 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
More from NVD Recent CVEs
- unknownCVE-2026-69153: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming t…2026-08-03
- highCVE-2026-69152: The brace-expansion library generates arbitrary strings containing a common prefix and suffix.…2026-08-03
- unknownCVE-2026-69151: Angular is a development platform for building mobile and desktop web applications using TypeS…2026-08-03
- unknownCVE-2026-69149: Angular is a development platform for building mobile and desktop web applications using TypeS…2026-08-03
- unknownCVE-2026-68945: Angular is a development platform for building mobile and desktop web applications using TypeS…2026-08-03