CVE-2026-17663 describes a security vulnerability in Google Chrome on Android where insufficient validation of untrusted input in the GPU component allows a remote attacker, who already controls the renderer process, to potentially perform a sandbox escape by delivering a specially crafted HTML page. This vulnerability could enable the attacker to break out of the sandbox environment, increasing the risk of further system compromise. The affected versions are all versions prior to 151.0.7922.72, although this is inferred from the description rather than explicitly stated in the affectedVersions field. No CVSS score or detailed vendor advisory is available to confirm patch status or further technical details.

The vulnerability allows a remote attacker with control over the renderer process to potentially escape the sandbox, which could lead to elevated privileges or further compromise of the device. This increases the attack surface beyond the renderer process isolation, posing a significant security risk on affected Android devices running vulnerable Chrome versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 151.0.7922.72 or later once available to mitigate this vulnerability.