CVE-2026-17719 Google CVE debrief

Who should care

Organizations and individuals using Google Chrome for browsing should be aware of this vulnerability and take immediate action to update to the latest version. Additionally, security teams and administrators responsible for managing browser updates and security patches should prioritize this CVE. IT managers, security professionals, and Chrome users should review and implement compensating controls to detect and prevent exploitation attempts.

Technical summary

CVE-2026-17719 is a high severity use after free vulnerability in the Input component of Google Chrome prior to version 151.0.7922.72. This vulnerability allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The CVSS score for this vulnerability is 8.8, indicating a high level of severity. The vulnerability affects Google Chrome users and requires immediate attention to prevent potential code execution.

Defensive priority

High severity vulnerability in Google Chrome, requiring immediate attention to prevent potential code execution.

Recommended defensive actions

• Apply the latest Google Chrome update (version 151.0.7922.72 or later) to prevent potential code execution.
• Review and implement compensating controls to detect and prevent exploitation attempts.
• Monitor Google Chrome installations for compliance with the updated version.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE-2026-17719 record indicates a high severity vulnerability in Google Chrome prior to version 151.0.7922.72, allowing remote attackers to execute arbitrary code inside a sandbox via a crafted HTML page. The Chromium security severity is rated as High with a CVSS score of 8.8. Evidence of exploitation is limited, and defenders should verify Chrome version deployments, review system logs for suspicious activity, and ensure update compliance.

Official resources