CVE-2026-17712 is a race condition vulnerability in the Skia graphics library used by Google Chrome on Mac platforms. Exploitation involves a remote attacker crafting an HTML page that triggers the race condition, enabling arbitrary code execution inside the sandbox environment. The vulnerability affects Chrome versions prior to 151.0.7922.72. Although a vendor advisory link is provided, it does not explicitly confirm the availability of a patch or official remediation, and no CVSS score is assigned.

Successful exploitation allows remote attackers to execute arbitrary code within the sandbox of Google Chrome on Mac, potentially compromising the security boundaries of the browser. This could lead to unauthorized actions or data exposure within the sandboxed environment. The severity is rated high by Chromium security, indicating significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official fixes are confirmed and applied, users should exercise caution when browsing untrusted content on affected Chrome versions on Mac. No explicit mitigation or temporary workaround is provided in the advisory.