Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the re…

CVE-2026-17684 is a high-severity vulnerability in Google Chrome for iOS affecting versions prior to 151.0.7922.72. The flaw stems from insufficient validation of untrusted input in the Chrome for iOS component. A remote attacker who has already compromised the renderer process could exploit this vulnerability to perform a sandbox escape. The attack vector requires a crafted HTML page to trigger the escape. This vulnerability is classified as High severity by the Chromium security team. The fix was included in the stable channel update for Chrome 151.0.7922.72. Users on iOS are advised to update to the latest version immediately. The issue is currently awaiting full analysis on NVD.