SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-17867

HIGH · CVSS 7.1 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-30 · Last synced 2026-08-29

CyberRota Analysis

AI-Generated

A vulnerability in the Dawn component of Google Chrome prior to version 151.0.7922.72 allows remote attackers to execute a sandbox escape through specially crafted HTML content due to insufficient validation of untrusted input. This high-severity flaw could lead to unauthorized access to system resources, making it critical for users and organizations relying on Chrome to prioritize updates to mitigate potential exploitation.

CVE
CVE-2026-17867
Severity
HIGH
CVSS
7.1
EPSS
0.18%
Chrome

Original NVD Description

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-93387 MEDIUM CVE-2026-93386 MEDIUM CVE-2026-93385 MEDIUM CVE-2026-93384 LOW CVE-2026-93383 MEDIUM CVE-2026-93382 HIGH