Threats tagged 'ghsa-cwp6-3cc4-8qxc'

CVE-2026-17680 is a heap buffer overflow vulnerability in the Color component of Google Chrome on ChromeOS versions prior to 151.0.7922.72. This flaw allows a remote attacker who has already compromised the renderer process to potentially escape the sandbox by using a crafted HTML page. The vulnerability has a high severity rating from Chromium and a CVSS score of 9.6, indicating critical impact on confidentiality, integrity, and availability.