CVE-2024-7017: Google Chrome

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected products

• Google Chrome: before 126.0.6478.182 (fixed in 126.0.6478.182)

Published 2025-11-14. Last modified 2026-10-02.