Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. …

CVE-2026-17758 describes a heap buffer overflow vulnerability in Dawn, the WebGPU implementation used in Google Chrome. The flaw affects Chrome versions prior to 151.0.7922.72 and could allow a remote attacker to potentially escape the browser sandbox by enticing a victim to visit a crafted HTML page. The vulnerability is rated Medium severity by the Chromium security team. Google addressed the issue in the stable channel update released for desktop. Heap buffer overflows in browser graphics components are particularly sensitive as they can be leveraged for memory corruption and code execution. The fix is included in Chrome 151.0.7922.72 and users are advised to update immediately. No active exploitation in the wild has been confirmed at this time based on available information.