CVE-2026-17807 is a use-after-free vulnerability in the V8 JavaScript engine component of Google Chrome versions before 151.0.7922.72. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code inside the browser sandbox via a specially crafted HTML page. The vulnerability is rated with a CVSS 3.1 score of 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. The vendor has published a stable channel update to fix this issue.

Successful exploitation could lead to remote code execution within the sandbox environment of the browser, potentially compromising confidentiality, integrity, and availability of the affected system. However, no active exploitation has been reported in the wild at this time.

Users should update Google Chrome to version 151.0.7922.72 or later, where this vulnerability is fixed. The vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html provides official update information. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated.