CVE Catalog

CVE-2026-17670

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

32th percentile - higher than 32% of all known CVEs

Summary

Use after free in the Views component of Google Chrome prior to 151.0.7922.72. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.

Risk Assessment

The risk involves a potential sandbox escape, which could allow an attacker to execute arbitrary code on the system.

Recommendation

It is recommended to immediately update Google Chrome to version 151.0.7922.72 or later.

Original NVD description (English source)

Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS