CVE Catalog

CVE-2026-17701

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Insufficient validation of untrusted input in ANGLE on Mac allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Risk Assessment

Sandbox escape can allow an attacker to execute code outside browser restrictions, increasing the risk of full system compromise.

Recommendation

Update Google Chrome on Mac to version 151.0.7922.72 or later.

Original NVD description (English source)

Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS