Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san…

CVE-2026-17673 is a high-severity integer overflow vulnerability in the QUIC protocol implementation within Google Chrome. The flaw affects all Chrome versions prior to 151.0.7922.72. A remote attacker who has already compromised the renderer process can exploit this vulnerability to potentially escape the Chrome sandbox. Exploitation requires delivering a crafted HTML page to the victim. The attack surface is remote, making it particularly dangerous in web browsing scenarios. Google has addressed the issue in the stable channel update released for desktop. The vulnerability has been rated High severity by the Chromium security team. Users are advised to update to Chrome 151.0.7922.72 or later immediately.