CVE-2026-17770 is an out of bounds read vulnerability in the Media component of Google Chrome on Mac systems before version 151.0.7922.72. The vulnerability allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape by delivering a crafted HTML page. This vulnerability is classified as CWE-125. There is no CVSS score available, and no explicit patch or remediation information is provided in the data. No known active exploitation has been reported.

If exploited, this vulnerability could allow an attacker with control over the renderer process to escape the sandbox, potentially leading to further compromise of the system beyond the browser sandbox restrictions. However, exploitation requires prior compromise of the renderer process, limiting the initial attack vector. The severity is considered medium by Chromium security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor official Google Chrome security advisories for updates and apply updates promptly once available.