CVE-2026-17776

Policy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17776

CVE-2026-17776 describes a policy bypass vulnerability in Google Chrome’s Receiver prior to version 151.0.7922.72. If an attacker could compromise the renderer process, they might use a crafted HTML page to escape the sandbox. The issue is limited to the browser’s Receiver component and relies on...