CVE-2026-17680

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 151.0.7922.72

Description A heap buffer overflow occurs in the Color component. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially crafted HTML page. A heap buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

Recommendations Update Google Chrome on ChromeOS to version 151.0.7922.72 or later.