CVE Catalog
CVE-2026-17947
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.17%
7th percentile - higher than 7% of all known CVEs
Summary
Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
The risk involves the possibility of escaping the browser sandbox, which could lead to code execution outside security restrictions and system compromise.
Recommendation
It is recommended to immediately update Google Chrome to version 151.0.7922.72 or later.
Original NVD description (English source)
Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)