CVE-2026-17881 is an integer overflow vulnerability in the WebXR implementation of Google Chrome before version 151.0.7922.72. Exploitation involves a remote attacker delivering a specially crafted HTML page that triggers the overflow, enabling arbitrary code execution inside the browser's sandbox. The vulnerability is recognized as medium severity by the Chromium security team. No CVSS score is available, and no vendor advisory or patch links are provided in the data. The vulnerability does not affect cloud services and no known active exploits have been reported.

Successful exploitation could allow remote code execution within the sandboxed environment of the browser, potentially leading to unauthorized actions or compromise of the browser process. However, the impact is limited by sandbox containment, and no active exploitation has been observed.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a later one to remediate the vulnerability. Since this is a client-side browser vulnerability, updating the browser is the primary mitigation step. Patch status is confirmed by the version cutoff stated in the description.