CVE Catalog
CVE-2026-18002
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to version 151.0.7922.72 allows a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
Risk that an attacker can escape the browser sandbox and gain broader system access, potentially leading to full compromise.
Recommendation
Update Google Chrome to version 151.0.7922.72 or later.
Original NVD description (English source)
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)