Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the re…

CVE-2026-17684 is a high-severity vulnerability in Google Chrome for iOS affecting versions prior to 151.0.7922.72. The flaw stems from insufficient validation of untrusted input in the Chrome for iOS component. A remote attacker who has already compromised the renderer process could exploit this vulnerability to perform a sandbox escape. The attack vector requires a crafted HTML page to trigger the exploit. This vulnerability is classified as High severity by the Chromium security team. The fix was included in the stable channel update released in July 2026. Users are advised to update to Chrome 151.0.7922.72 or later on iOS devices to mitigate the risk.