What is the CVSS score of EUVD-2026-50582?

EUVD-2026-50582 has a contested CVSS base score of 4.3 from a third party (e.g. CISA-ADP), while the vendor rates it Medium. vuln.today uses the vendor rating as authoritative.

Is there a patch available for EUVD-2026-50582?

Yes, a patch is available for EUVD-2026-50582. Update the affected software to the latest version immediately.

Google Chrome EUVD-2026-50582

| CVE-2026-17833 MEDIUM

Origin Validation Error (CWE-346)

2026-07-30 Chrome

GHSA-3xr2-3348-786h

Information Disclosure Google

Medium

Disputed · 4.3 Vendor: Chrome

Severity by source

Sources disagree (Medium–Critical)

Vendor (Chrome) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Network-delivered via crafted page (AV:N/AC:L/PR:N); user must visit the page (UI:R); impact is limited to partial cross-origin data disclosure with no integrity or availability effect (C:L/I:N/A:N).

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SUSE

CRITICAL

qualitative

Red Hat

6.5 MEDIUM

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Chrome

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 30, 2026 - 19:46 vuln.today

Patch available

Jul 30, 2026 - 02:02 EUVD

CVE Published

Jul 30, 2026 - 00:19 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 30, 2026 - 00:19 cve.org

MEDIUM 4.3

DescriptionCVE.org

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

AnalysisAI

Cross-origin data leakage in Google Chrome's Passwords component (prior to 151.0.7922.72) allows a remote attacker to read credential or password-related data across origin boundaries by enticing a user to visit a crafted HTML page. The flaw stems from an origin validation error (CWE-346) in the Passwords feature, where Chrome fails to properly enforce same-origin constraints. No public exploit code has been identified and SSVC signals no known active exploitation, placing this in the medium-priority tier despite Chrome's ubiquitous deployment footprint.

Technical ContextAI

CWE-346 (Origin Validation Error) describes a failure to correctly determine or enforce the origin of a request or resource, undermining the browser's same-origin policy. In this case, the flaw resides specifically in Chrome's Passwords subsystem - the component responsible for managing saved credentials, autofill suggestions, and password-related UI. An inappropriate implementation within that component allows a crafted HTML page to trigger cross-origin data exposure, potentially leaking autofill state, credential hints, or other password-related signals to an attacker-controlled origin. The affected CPE is cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*, covering all Chrome desktop builds prior to 151.0.7922.72 across platforms.

RemediationAI

Vendor-released patch: Chrome 151.0.7922.72. Update to Chrome 151.0.7922.72 or later via the browser's built-in update mechanism (chrome://settings/help) or via enterprise software management tools. The vendor stable-channel release notes are available at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html. For organizations that cannot immediately update, a compensating control is to disable Chrome's built-in password manager (chrome://settings/passwords → toggle off 'Offer to save passwords'), which reduces the attack surface of the Passwords component at the cost of losing autofill convenience; users would need an alternative credential manager. Restricting navigation to untrusted or unsolicited HTML pages via URL filtering or Safe Browsing enforcement also limits exposure.