Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape vi…

CVE-2026-17655 is a critical vulnerability in Google Chrome's ANGLE graphics library affecting versions prior to 151.0.7922.72. The flaw stems from insufficient validation of untrusted input within the ANGLE component. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation could result in a sandbox escape, potentially allowing the attacker to execute code outside the browser's security sandbox. Google has rated this vulnerability as Critical severity. A fix has been released in Chrome stable channel version 151.0.7922.72. Users are strongly advised to update their Chrome browser immediately to mitigate the risk.