


Perceptive Security
SOC/SIEM Consultancy

Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted …
Published:
29 July 2026 at 22:00:00
Alert date:
30 July 2026 at 17:11:53
Source:
nvd.nist.gov
Web Technologies, Zero-Day Vulnerabilities, Operating Systems
CVE-2026-17691 is a high-severity out-of-bounds write vulnerability in ANGLE (Almost Native Graphics Layer Engine) within Google Chrome on Windows. The flaw exists in versions prior to 151.0.7922.72 and allows a remote attacker to potentially perform a sandbox escape by convincing a user to visit a crafted HTML page. The vulnerability has been assigned a 'High' severity rating by the Chromium security team. Google has addressed the issue in the stable channel update released for desktop. The issue is tracked internally under Chromium bug ID 517321292. Users are advised to update to Chrome 151.0.7922.72 or later to mitigate the risk.
Technical details
Mitigation steps:
Affected products:
Google Chrome on Windows (prior to 151.0.7922.72)
ANGLE (Almost Native Graphics Layer Engine)
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-17691
https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html
https://issues.chromium.org/issues/517321292
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
