Description
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-07-30
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a use‑after‑free flaw in ANGLE, the graphics layer employed by Google Chrome. A specially crafted HTML page can trigger the flaw, potentially allowing a remote attacker to escape Chrome’s sandbox. The weakness is captured by CWE‑416 and CWE‑825.

Affected Systems

Google Chrome users running versions prior to 151.0.7922.72 are affected. The issue applies to all platforms that utilize ANGLE, including Windows, macOS, and Linux.

Risk and Exploitability

The CVSS score of 7.1 classifies this as a medium‑severity vulnerability. The EPSS score is less than 1%, indicating a low probability of exploitation, and it is not listed in the CISA KEV catalog. Based on the description, the exploit likely requires a victim to load a crafted HTML page in the browser.

Generated by OpenCVE AI on August 3, 2026 at 12:17 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Chrome to version 151.0.7922.72 or later, which contains the ANGLE use‑after‑free fix.
  • Disable or restrict the rendering of untrusted web content by using Chrome's site isolation and safe browsing features.
  • Keep the browser updated automatically and monitor official Chrome release notes for new vulnerability disclosures.

Generated by OpenCVE AI on August 3, 2026 at 12:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4710-1 chromium security update
Debian DSA Debian DSA DSA-6408-1 chromium security update
History

Fri, 31 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title chromium-browser: chromium-browser: Use after free in ANGLE
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 30 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 30 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Thu, 30 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Description Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-07-30T19:07:47.820Z

Reserved: 2026-07-27T23:34:37.300Z

Link: CVE-2026-17750

cve-icon Vulnrichment

Updated: 2026-07-30T19:07:11.174Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-30T01:16:37.910

Modified: 2026-08-03T17:58:25.240

Link: CVE-2026-17750

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-30T00:19:11Z

Links: CVE-2026-17750 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T12:30:17Z

Weaknesses