Threats tagged 'ghsa-5mm6-fj7r-pv27'

CVE-2026-17681 is a critical vulnerability in Google Chrome on Android prior to version 151.0.7922.72. It involves insufficient validation of untrusted input in the Web Authentication component, which could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.