CVE Catalog

CVE-2026-17697

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Type Confusion in ANGLE allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Risk Assessment

Sandbox escape can allow an attacker to execute code outside browser restrictions, increasing the risk of full system compromise.

Recommendation

Update Google Chrome to version 151.0.7922.72 or later.

Original NVD description (English source)

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS