Chrome Android PIP Race Prior 151.0.7922.72 Domain Spoofing
CVE-2026-17999 Published on July 30, 2026
Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)
Products Associated with CVE-2026-17999
Want to know whenever a new CVE is published for Google Chrome? stack.watch will email you.
Affected Versions
Google Chrome:- Version 151.0.7922.72 and below 151.0.7922.72 is affected.