CVE-2026-17651

CriticalCVSS 9.6

Published: 30/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

Insufficient validation of untrusted input in the Dawn component of Google Chrome on Android prior to 151.0.7922.72. A remote attacker could potentially escape the sandbox via a crafted HTML page.

Risk Assessment

Critical sandbox escape risk on Android devices, allowing remote code execution outside the browser.

Recommendation

Update Google Chrome on Android to version 151.0.7922.72 or later immediately.

Original NVD description (English source)

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)