CVE-2026-17809 describes a vulnerability in Google Chrome's Extensions component before version 151.0.7922.72, where insufficient validation of untrusted input allows a remote attacker with control over the renderer process to potentially perform a sandbox escape via a crafted HTML page. This vulnerability is related to CWE-20 (Improper Input Validation). The lack of a CVSS score and absence of vendor advisory or patch information limits detailed impact and remediation analysis.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the browser's sandbox, potentially leading to further system compromise beyond the browser context. However, exploitation requires prior control of the renderer process. No known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 151.0.7922.72 or later once available to remediate this issue.