This vulnerability (CVE-2026-17676) affects the ANGLE component in Google Chrome on Android versions before 151.0.7922.72. The flaw is due to an inappropriate implementation that enables a remote attacker, with control over the renderer process, to potentially perform a sandbox escape by delivering a crafted HTML page. The sandbox escape could lead to elevated privileges and compromise of the device. The CVSS 3.1 base score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time. The vendor advisory linked indicates a stable channel update addressing this issue, but explicit patch availability or remediation level is not stated in the provided data.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox on Android devices, potentially leading to full compromise of the device's security boundaries. This includes high impact on confidentiality, integrity, and availability of the affected system. The vulnerability requires user interaction but no privileges or authentication, making it a significant risk if exploited.

The vendor has published a stable channel update for Chrome that addresses this vulnerability. Users and administrators should update Google Chrome on Android to version 151.0.7922.72 or later to remediate this issue. Patch status is not explicitly confirmed in the advisory content provided, so checking the vendor advisory for the latest remediation guidance is recommended.