


Perceptive Security
SOC/SIEM Consultancy

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chro…
Published:
29 July 2026 at 22:00:00
Alert date:
30 July 2026 at 21:05:50
Source:
nvd.nist.gov
Web Technologies, Zero-Day Vulnerabilities
CVE-2026-17718 is a high-severity use-after-free vulnerability in ANGLE, the graphics abstraction layer used by Google Chrome. The flaw exists in Chrome versions prior to 151.0.7922.72 and allows a remote attacker to potentially escape the browser sandbox by convincing a user to visit a specially crafted HTML page. The vulnerability was rated High severity by the Chromium security team. Google has addressed the issue in the stable channel update released for desktop. ANGLE (Almost Native Graphics Layer Engine) is a critical component responsible for translating OpenGL ES calls to platform-native graphics APIs, making vulnerabilities in it particularly impactful. Sandbox escapes of this nature can lead to full system compromise if chained with additional exploits. Users are advised to update Google Chrome to version 151.0.7922.72 or later immediately.
Technical details
Mitigation steps:
Affected products:
Google Chrome
ANGLE
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-17718
https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html
https://issues.chromium.org/issues/522079372
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
