CVE-2026-17809 is a vulnerability in Google Chrome's Extensions component affecting versions before 151.0.7922.72. It arises from insufficient validation of untrusted input, which can be exploited by a remote attacker who has already compromised the renderer process. The attacker could leverage this flaw to perform a sandbox escape via a crafted HTML page, potentially increasing their privileges or access within the system. The vulnerability is classified under CWE-20 (Improper Input Validation) and has a CVSS 3.1 base score of 5.8, indicating moderate impact. There are no known exploits in the wild and no explicit patch links provided in the data.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox environment, potentially leading to increased privileges and further compromise of the host system. The impact includes limited confidentiality, integrity, and availability loss as indicated by the CVSS vector (C:L/I:L/A:L).

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a later one to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the official update. No additional mitigation steps are indicated in the available data.