CVE-2026-17800
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Jul 30, 2026
CISA due date
—
The record
Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-18019 Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed… CWE-1300
- CVE-2026-17978 Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72… CWE-1300
- CVE-2026-17942 Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a… CWE-1300
- CVE-2026-17914 Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed… CWE-1300
- CVE-2026-17907 Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72… CWE-1300
- CVE-2026-17859 Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed… CWE-1300
- CVE-2026-17851 Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72… CWE-1300
- CVE-2026-17796 Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed… CWE-1300