CVE-2026-17922
Google · Chrome
An inappropriate implementation in the Enterprise component of Google Chrome prior to version 151 can lead to security policy bypasses or unintended system behavior.
Executive summary
An implementation flaw in the Enterprise component of Google Chrome introduces a high-risk security vulnerability that could be exploited to compromise enterprise-managed environments.
Vulnerability
This vulnerability is caused by an inappropriate implementation within the Enterprise management features. It is a network-based issue that is triggered by user interaction with malicious content.
Business impact
Successful exploitation in an enterprise environment could lead to the circumvention of established security controls, potentially granting attackers unauthorized access to managed systems. The CVSS score of 8.8 highlights the severity, as enterprise-managed browsers are often critical points of control for corporate networks.
Remediation
Immediate Action: Update all enterprise-managed Google Chrome instances to version 151.0.7922.72 or later to rectify the implementation flaw.
Proactive Monitoring: Review enterprise console logs and browser configuration changes for signs of unauthorized modification or policy override attempts.
Compensating Controls: Use centralized configuration management to ensure that security policies are enforced at the system level, reducing reliance on browser-local controls.
Exploitation status
Public Exploit Available: No (exploit_available: false)
Analyst recommendation
Organizations must treat this update as a high priority, especially in environments where browser-based enterprise policies are heavily utilized. Ensure that the latest version is deployed across all managed endpoints to mitigate the risk of security control circumvention.