CVE-2026-17653 is a use-after-free vulnerability in the Skia graphics library used by Google Chrome. It affects Chrome versions prior to 151.0.7922.72. The vulnerability enables a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape by delivering a crafted HTML page. This could allow the attacker to break out of the restricted execution environment of the renderer process, increasing the impact of an initial compromise. The vulnerability is identified as CWE-416 (Use After Free). No public exploits are known at this time.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to greater system compromise beyond the browser sandbox. This elevates the severity of an initial renderer compromise by enabling further unauthorized actions on the host system.

A fix is available in Google Chrome version 151.0.7922.72 and later. Users and administrators should update to this version or a later one to remediate the vulnerability. Since this is a client software vulnerability, patching the affected Chrome installations is the recommended mitigation. There is no indication that the vulnerability is mitigated by other means or that no action is required.