What is GHSA-pwgg-jhvp-wr6h?

GHSA-pwgg-jhvp-wr6h is a security advisory published by GitHub Security Advisories with Critical severity. Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151...

Which CVE IDs does GHSA-pwgg-jhvp-wr6h cover?

GHSA-pwgg-jhvp-wr6h covers the following CVE IDs: CVE-2026-17684. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pwgg-jhvp-wr6h?

GHSA-pwgg-jhvp-wr6h has a CVSS v3 base score of 9.6, published by GitHub Security Advisories.

GHSA-pwgg-jhvp-wr6hCriticalCVSS 9.6

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151...

Vendor

GitHub Security Advisories

Published

July 30, 2026

Last Modified

July 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-17684 →

📋 Description

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-17684
https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html
https://issues.chromium.org/issues/516894682
https://github.com/advisories/GHSA-pwgg-jhvp-wr6h