CVE-2026-17727 is a high-severity out-of-bounds write vulnerability in WebGL within Google Chrome on Android. It affects versions prior to 151.0.7922.72 and allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The vulnerability was assigned a High severity rating by the Chromium security team. Exploitation requires the victim to visit a malicious HTML page, making it remotely exploitable without authentication. Google has addressed the issue in the stable channel update released in July 2026. The flaw is tracked in the Chromium issue tracker under issue 529932631. Users running Chrome on Android are advised to update immediately to the patched version.