CVE-2026-17848 describes an integer overflow vulnerability in the Codecs module of Google Chrome before version 151.0.7922.72. Exploitation involves a crafted video file that may trigger the overflow, potentially enabling a remote attacker to bypass sandbox restrictions. The vulnerability is categorized under CWE-20 (Improper Input Validation). There is no CVSS score available, and no explicit patch information is provided in the source data.

Successful exploitation could allow a remote attacker to perform a sandbox escape, which may lead to execution of arbitrary code outside the browser's restricted environment. This elevates the risk beyond typical browser compromise, potentially affecting system security. However, no known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the update to version 151.0.7922.72 or later once available to remediate this vulnerability.