Loading vulnerability…
Sandbox escape in Google Chrome for Android Dawn input validation
CVE-2026-17651 is a critical insufficient validation of untrusted input vulnerability in Dawn in Google Chrome on Android prior to version 151.0.7922.72. Dawn is Chrome’s graphics-related component used in the browser’s rendering stack. The flaw allows attacker-controlled input delivered through a crafted HTML page to reach Dawn without adequate validation, creating a path for a remote attacker to potentially break out of the browser sandbox. Publicly available information does not identify the specific vulnerable function or code path.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation could allow a remote attacker to potentially perform a sandbox escape from Chrome on Android. A sandbox escape can enable compromise beyond the renderer context and may permit broader browser or application-level compromise, including arbitrary code execution or access to data and resources otherwise isolated by the sandbox, subject to the constraints of the target environment.
If you can’t patch tonight, do this now.
If immediate patching is not possible, reduce exposure by limiting access to untrusted web content, enforcing least privilege on affected devices, restricting installation and use of unnecessary browser extensions or risky web features where administratively possible, and using mobile security controls that reduce exposure to malicious links and websites. These measures are temporary risk reductions and do not eliminate the vulnerability.
Patch, then assume compromise.
Upgrade Google Chrome on Android to version 151.0.7922.72 or later. Where Chromium-based downstream packages are used, apply the corresponding vendor-provided fixed release. Standard patch management should prioritize this issue due to its critical severity and sandbox escape potential.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.