CVE-2026-17807 is a use-after-free vulnerability in the V8 engine of Google Chrome before version 151.0.7922.72. Exploitation requires a remote attacker to deliver a specially crafted HTML page, enabling arbitrary code execution inside the browser sandbox. The vulnerability is identified as CWE-416 and has been assigned medium severity by Chromium. No CVSS score or detailed vendor advisory is currently available, and no exploits are known in the wild at this time.

Successful exploitation could allow remote attackers to execute arbitrary code within the sandboxed environment of the browser, potentially leading to unauthorized actions or data compromise within that sandbox. However, the impact is limited by the sandbox containment. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome to version 151.0.7922.72 or later once the update is available. Until then, no specific mitigation beyond applying the official update can be recommended.