CVE Catalog

CVE-2026-17687

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Risk Assessment

An attacker could escape the sandbox and execute arbitrary code, leading to full system control.

Recommendation

Update Google Chrome to version 151.0.7922.72 or later.

Original NVD description (English source)

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS