Question 1

What is CVE-2026-17895 — CVE-2026-17895?

Accepted Answer

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Question 2

What is the authoritative source for CVE-2026-17895?

Accepted Answer

CVE-2026-17895 (CVE-2026-17895) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-17895CVE-2026-17895

Description

Scoring