CVE-2026-17680 is a heap buffer overflow vulnerability in the Color component of Google Chrome on ChromeOS, affecting versions prior to 151.0.7922.72. The flaw allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape via a specially crafted HTML page. The vulnerability is rated High severity by the Chromium security team. Successful exploitation requires a prior renderer compromise, making it a second-stage attack vector. Google has addressed the issue in Chrome version 151.0.7922.72 for ChromeOS. The vulnerability was publicly disclosed via NVD and the Chrome stable channel release blog. No active exploitation in the wild is currently mentioned, but the sandbox escape potential makes it critically important to patch.