CVE Catalog

CVE-2026-17669

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

32th percentile - higher than 32% of all known CVEs

Summary

Inappropriate implementation in the Chrome for iOS component of Google Chrome on iOS prior to 151.0.7922.72. A remote attacker could potentially perform a sandbox escape via a crafted HTML page.

Risk Assessment

The risk involves a potential sandbox escape on iOS devices, which could lead to operating system security compromise.

Recommendation

It is recommended to immediately update Google Chrome on iOS to version 151.0.7922.72 or later.

Original NVD description (English source)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS