SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-17888

HIGH · CVSS 7.1 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-30 · Last synced 2026-08-29

CyberRota Analysis

AI-Generated

Google Chrome versions prior to 151.0.7922.72 are vulnerable due to insufficient validation of untrusted input in the WebUI, which could enable a remote attacker to execute a sandbox escape through malicious network traffic. This vulnerability poses a high risk, as it could allow unauthorized access to sensitive system resources. Organizations using affected versions of Chrome should prioritize updating to mitigate potential exploitation.

CVE
CVE-2026-17888
Severity
HIGH
CVSS
7.1
EPSS
0.16%
Chrome

Original NVD Description

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)