CVE-2026-17749
Low risk· EPSS 3%Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
Risk Assessment
An attacker could escape the sandbox and gain system access, potentially leading to full device compromise.
Recommendation
Immediately update Google Chrome to version 151.0.7922.72 or later and avoid installing untrusted extensions.
Original NVD description (English source)
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Medium)