CVE-2026-17652 is a use-after-free vulnerability in the Views component of Google Chrome versions prior to 151.0.7922.72. An attacker who has already compromised the renderer process could exploit this flaw via a specially crafted HTML page to perform a sandbox escape, potentially gaining higher privileges or executing arbitrary code outside the browser sandbox. The vulnerability has a CVSS 3.1 base score of 9.6, indicating critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escape the Chrome sandbox from the compromised renderer process, potentially leading to arbitrary code execution with elevated privileges and full system compromise.

Google has released an update in Chrome version 151.0.7922.72 that addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Patch status is not explicitly confirmed in the advisory, but the presence of the fixed version indicates an official fix is available. No additional mitigation steps are specified by the vendor.