Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. …

CVE-2026-17721 is a high-severity out-of-bounds write vulnerability in ANGLE (Almost Native Graphics Layer Engine), a graphics abstraction component used by Google Chrome. The flaw affects Chrome versions prior to 151.0.7922.72 and can be exploited by a remote attacker via a crafted HTML page. Successful exploitation could potentially result in a sandbox escape, allowing malicious code to break out of Chrome's security sandbox. The vulnerability was assigned a High severity rating by the Chromium security team. A fix was shipped in the stable channel update for desktop. Users are advised to update to Chrome 151.0.7922.72 or later to mitigate the risk. The issue is tracked in the Chromium issue tracker under issue 523495723.