CVE-2026-12022 is a race condition vulnerability in the Safe Browsing feature of Google Chrome on Mac platforms before version 149.0.7827.115. An attacker with control over the renderer process could exploit this race condition to perform a sandbox escape using a malicious file. This vulnerability could elevate privileges beyond the renderer sandbox, increasing the potential impact of a renderer compromise. The vulnerability is acknowledged by Google with a high severity rating. The vendor advisory is linked but does not explicitly confirm patch availability or remediation level in the provided information.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to further system compromise beyond the browser sandbox. This increases the risk associated with renderer process compromises on affected versions of Chrome for Mac.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01962725236.html for current remediation guidance. Users should update to version 149.0.7827.115 or later once confirmed as fixed by the vendor. Until then, limiting renderer process compromise risk is advisable.