This vulnerability in Google Chrome affects the Save to Drive functionality and is caused by insufficient validation of untrusted input. An attacker who has already compromised the renderer process can exploit this flaw by crafting a malicious PDF file to perform a sandbox escape. The vulnerability is identified as CVE-2026-17803 and affects Chrome versions prior to 151.0.7922.72. The CVSS v3.1 score is 9.6, reflecting a critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor has published an advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html but does not explicitly state the patch status in the provided data.

Successful exploitation allows a remote attacker who has compromised the renderer process to escape the sandbox, potentially leading to full system compromise. The impact includes complete loss of confidentiality, integrity, and availability of the affected system. This elevates the attacker's privileges beyond the renderer sandbox, increasing the risk of further malicious activity on the host.

The vulnerability affects versions of Google Chrome prior to 151.0.7922.72. Users and administrators should update to version 151.0.7922.72 or later to mitigate this issue. The vendor advisory linked should be consulted for the latest remediation guidance. Patch status is not explicitly confirmed in the provided data; therefore, verify the vendor advisory for current update availability and instructions.