CVE-2026-17709 is a race condition vulnerability in the Downloads feature of Google Chrome on Mac platforms before version 151.0.7922.72. An attacker with control over the renderer process can exploit this race condition to perform a sandbox escape, which could lead to execution of code outside the browser's restricted environment. The vulnerability was publicly disclosed and is tracked by Google with a high severity rating. The vendor has published a stable channel update addressing this issue.

Successful exploitation allows a remote attacker who has already compromised the renderer process to escape the sandbox protections of Google Chrome on Mac. This could enable the attacker to execute code with higher privileges or access restricted system resources, increasing the potential damage from a renderer compromise.

Google has released an update to address this vulnerability in Chrome version 151.0.7922.72. Users should update to this version or later to mitigate the risk. Since this is a client-side application vulnerability, applying the official patch is the recommended remediation. No additional vendor advisories indicate alternative mitigations or that the issue is already mitigated without patching.