Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sand…

CVE-2026-17687 describes a Type Confusion vulnerability in ANGLE (Almost Native Graphics Layer Engine) within Google Chrome versions prior to 151.0.7922.72. The flaw allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape via a specially crafted HTML page. Chromium has rated this vulnerability as High severity. The attack vector requires prior compromise of the renderer process, making it a chained exploitation scenario. Google addressed this issue in the stable channel update for desktop. The vulnerability is currently undergoing analysis by NVD. ANGLE is the graphics abstraction layer used by Chrome to translate OpenGL ES calls to platform-native graphics APIs.