CVE-2026-17701 describes an insufficient validation vulnerability in the ANGLE component of Google Chrome on Mac platforms before version 151.0.7922.72. This flaw enables a remote attacker, who has already compromised the renderer process, to potentially perform a sandbox escape by delivering a crafted HTML page. The vulnerability is related to improper handling of untrusted input, categorized under CWE-125 (Out-of-bounds Read). No CVSS score or detailed exploit information is available. The vulnerability affects versions prior to 151.0.7922.72 on Mac only.

Successful exploitation could allow an attacker with control over the renderer process to escape the browser sandbox, potentially leading to execution of code outside the intended security boundaries. This elevates the attacker's privileges and could compromise the host system's security. However, exploitation requires prior compromise of the renderer process.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update affected Chrome installations on Mac to this version or newer to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the official update. No additional mitigation steps are indicated.