top of page
perceptive_background_267k.jpg

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process t…

Published:

30 July 2026 at 00:00:00

Alert date:

30 July 2026 at 22:07:35

Source:

nvd.nist.gov

Click to open the original link from this advisory

Web Technologies, Zero-Day Vulnerabilities

CVE-2026-17671 is a high-severity vulnerability in Google Chrome's ANGLE (Almost Native Graphics Layer Engine) component. The flaw stems from insufficient validation of untrusted input, allowing a remote attacker who has already compromised the renderer process to potentially escape the browser sandbox. Exploitation requires a compromised renderer process and is triggered via a crafted HTML page. The vulnerability affects Google Chrome versions prior to 151.0.7922.72. Google has addressed the issue in the stable channel update released in July 2026. The Chromium security team rated this as High severity. Sandbox escapes in browsers are particularly dangerous as they can allow attackers to execute code outside the browser's security boundary, potentially compromising the underlying operating system.

Technical details

Mitigation steps:

Affected products:

Google Chrome prior to 151.0.7922.72

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page