CVE-2026-17745 is an out of bounds read vulnerability in the Skia graphics library used by Google Chrome. It affects versions prior to 151.0.7922.72. The vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially perform a sandbox escape by leveraging a crafted HTML page. This could lead to increased privileges or further compromise of the host system. The issue is tracked under CWE-125 and has been assigned a Medium severity rating by the Chromium security team. No detailed CVSS score or vendor advisory patch information is currently available.

A successful exploitation of this vulnerability could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to execution of code with higher privileges on the host system. This elevates the risk of further system compromise beyond the browser sandbox. However, exploitation requires prior compromise of the renderer process, limiting the initial attack vector. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users and administrators should monitor official Chromium or Google Chrome security advisories for updates. Until a fix is available, limiting exposure to untrusted web content and maintaining standard browser security best practices is advisable.