CVE Catalog
CVE-2026-17758
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.30%
23th percentile - higher than 23% of all known CVEs
Summary
Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
An attacker could break out of the sandbox and gain unauthorized access to the operating system, potentially leading to full device compromise.
Recommendation
Update Google Chrome to version 151.0.7922.72 or later to mitigate the vulnerability.
Original NVD description (English source)
Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)