CVE-2026-17694

Google · Chrome

A use after free vulnerability exists in the Document Object Model (DOM) implementation of Google Chrome, potentially allowing an unauthenticated remote attacker to execute arbitrary code.

Executive summary

A critical use after free vulnerability in the Google Chrome DOM implementation poses a significant risk of arbitrary code execution for users.

Vulnerability

This is a use after free vulnerability found in the DOM processing logic of the browser. An unauthenticated attacker could trigger this issue by luring a user to a malicious webpage, resulting in memory corruption and possible code execution.

Business impact

Exploitation of this vulnerability poses a severe threat to system integrity and confidentiality. With a CVSS score of 8.8, this flaw represents a high-risk entry point for attackers to gain control over local systems, which justifies immediate patching efforts across the enterprise environment.

Remediation

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately.

Proactive Monitoring: Utilize endpoint detection and response systems to monitor for anomalous browser behavior or suspicious memory access patterns.

Compensating Controls: Use endpoint security software to prevent the execution of malicious scripts or unauthorized binaries often used in conjunction with browser exploits.

Exploitation status

Public Exploit Available: No

Analyst recommendation

Organizations should prioritize the deployment of the latest Chrome browser updates to mitigate this vulnerability. Immediate application of vendor-supplied security patches is the most effective way to secure the environment against potential exploitation of this DOM-based flaw.