CVE-2026-17680 is a heap buffer overflow vulnerability in the Color component of Google Chrome on ChromeOS versions before 151.0.7922.72. The vulnerability allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This could lead to increased privileges or further system compromise. The vulnerability is classified as high severity by Chromium security. The vendor advisory URL is provided but does not explicitly state patch availability or remediation details in the input data.

The vulnerability enables a remote attacker with control over the renderer process to potentially escape the sandbox environment, which could lead to execution of arbitrary code with elevated privileges or compromise of the underlying system. This increases the risk of a full system compromise on affected ChromeOS devices running vulnerable Chrome versions.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and update ChromeOS to version 151.0.7922.72 or later once available to mitigate this vulnerability.