CVE Catalog

CVE-2026-17652

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

23th percentile - higher than 23% of all known CVEs

Summary

Use-after-free vulnerability in the Views component of Google Chrome prior to 151.0.7922.72. A remote attacker who compromised the renderer process could potentially escape the sandbox via a crafted HTML page.

Risk Assessment

Critical sandbox escape risk, allowing remote code execution outside the browser.

Recommendation

Update Google Chrome to version 151.0.7922.72 or later immediately.

Original NVD description (English source)

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS