This vulnerability (CVE-2026-17669) affects Google Chrome on iOS before version 151.0.7922.72. It stems from an inappropriate implementation that enables a remote attacker to potentially escape the browser's sandbox environment by delivering a specially crafted HTML page. The sandbox escape could lead to full compromise of the affected device's security boundaries. The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. The vendor advisory URL is provided but does not explicitly confirm patch status or remediation details.

Successful exploitation could allow a remote attacker to escape the sandbox in Chrome for iOS, potentially leading to unauthorized access to system resources and compromise of device security. The impact includes full confidentiality, integrity, and availability loss of the affected system components within the sandbox scope.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when browsing untrusted websites and avoid interacting with suspicious HTML content.