Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proc…

CVE-2026-17672 is a high-severity vulnerability in Google Chrome's Chromecast component affecting versions prior to 151.0.7922.72. The flaw stems from insufficient validation of untrusted input, allowing a remote attacker who has already compromised the renderer process to potentially escape the browser sandbox. Exploitation requires a victim to visit a specially crafted HTML page. The vulnerability is classified as a sandbox escape, a critical class of bug that can lead to full system compromise beyond the browser environment. Google has addressed the issue in Chrome 151.0.7922.72. The Chromium security team rated this as High severity. The vulnerability is currently undergoing analysis on the NVD. No active exploitation has been confirmed at this time, but sandbox escapes following renderer compromise are considered high-risk attack chains.