CVE-2026-17776

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72

Description A policy bypass in the Receiver component allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape. This is triggered through the use of a specially crafted HTML page. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the underlying system.

Recommendations Update Google Chrome to version 151.0.7922.72 or later.