Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process t…

CVE-2026-17671 is a high-severity vulnerability in Google Chrome's ANGLE (Almost Native Graphics Layer Engine) component. The flaw stems from insufficient validation of untrusted input, allowing a remote attacker who has already compromised the renderer process to potentially escape the browser sandbox. Exploitation requires a compromised renderer process and is triggered via a crafted HTML page. The vulnerability affects Google Chrome versions prior to 151.0.7922.72. Google has addressed the issue in the stable channel update released in July 2026. The Chromium security team rated this as High severity. Sandbox escapes in browsers are particularly dangerous as they can allow attackers to execute code outside the browser's security boundary, potentially compromising the underlying operating system.