CVE-2026-17695 is a vulnerability in the ANGLE implementation within Google Chrome on Mac platforms before version 151.0.7922.72. The inappropriate implementation allows a remote attacker to potentially perform a sandbox escape by delivering a specially crafted HTML page. This vulnerability is rated critical with a CVSS 3.1 base score of 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vulnerability is tracked under CWE-693 (Protection Mechanism Failure).

Successful exploitation can lead to sandbox escape, allowing an attacker to break out of the browser's security restrictions. This could enable the attacker to execute arbitrary code on the host system, compromising confidentiality, integrity, and availability of the affected system. No active exploitation in the wild has been reported so far.

Google has released Chrome version 151.0.7922.72 which addresses this vulnerability. Users and administrators should update affected Chrome installations on Mac systems to version 151.0.7922.72 or later to mitigate the risk. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated by the vendor.