CVE-2026-17671 describes a vulnerability in the ANGLE component of Google Chrome before version 151.0.7922.72. The root cause is insufficient validation of untrusted input, which could allow a remote attacker who has already compromised the renderer process to perform a sandbox escape by delivering a crafted HTML page. This vulnerability is categorized under CWE-20 (Improper Input Validation). The Chromium security team rates this issue as high severity. There is no CVSS score provided, and no patch or remediation details are included in the available data.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to further system compromise beyond the browser sandbox. This elevates the risk of executing arbitrary code with higher privileges than normally allowed within the sandbox. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates and apply updates promptly once available.