CVE-2026-17716: Use after free in Google Chrome
A use-after-free vulnerability exists in the Updater component of Google Chrome on Mac systems prior to version 151.0.7922.72. This flaw allows a local attacker to escalate privileges by leveraging malicious network traffic. The vulnerability is rated high severity with a CVSS score of 8.4. No known exploits in the wild have been reported. Google has released Chrome version 151.0.7922.72 as an update addressing this issue.
AI Analysis
Technical Summary
CVE-2026-17716 is a use-after-free vulnerability in the Updater component of Google Chrome on Mac platforms. The flaw allows a local attacker to escalate privileges by exploiting malicious network traffic. The vulnerability affects Chrome versions prior to 151.0.7922.72. The CVSS 3.1 base score is 8.4, indicating high severity with high impact on confidentiality, integrity, and availability. Google has published a stable channel update to version 151.0.7922.72 that addresses this vulnerability.
Potential Impact
Successful exploitation of this use-after-free vulnerability can lead to local privilege escalation on affected Mac systems running vulnerable Chrome versions. This could allow an attacker to gain higher privileges than intended, potentially compromising system security. The CVSS score reflects high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Google has released Chrome version 151.0.7922.72 which fixes this vulnerability. Users and administrators should update affected Chrome installations on Mac to version 151.0.7922.72 or later to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.
CVE-2026-17716: Use after free in Google Chrome
Description
A use-after-free vulnerability exists in the Updater component of Google Chrome on Mac systems prior to version 151.0.7922.72. This flaw allows a local attacker to escalate privileges by leveraging malicious network traffic. The vulnerability is rated high severity with a CVSS score of 8.4. No known exploits in the wild have been reported. Google has released Chrome version 151.0.7922.72 as an update addressing this issue.
CVSS v3.1
Score 8.4high
Affected software
Chrome
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-17716 is a use-after-free vulnerability in the Updater component of Google Chrome on Mac platforms. The flaw allows a local attacker to escalate privileges by exploiting malicious network traffic. The vulnerability affects Chrome versions prior to 151.0.7922.72. The CVSS 3.1 base score is 8.4, indicating high severity with high impact on confidentiality, integrity, and availability. Google has published a stable channel update to version 151.0.7922.72 that addresses this vulnerability.
Potential Impact
Successful exploitation of this use-after-free vulnerability can lead to local privilege escalation on affected Mac systems running vulnerable Chrome versions. This could allow an attacker to gain higher privileges than intended, potentially compromising system security. The CVSS score reflects high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Google has released Chrome version 151.0.7922.72 which fixes this vulnerability. Users and administrators should update affected Chrome installations on Mac to version 151.0.7922.72 or later to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-07-27T23:34:29.586Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html","vendor":"Google"}]
Threat ID: 6a6aa0859c2644c7f849a966
Added to database: 07/30/2026, 00:53:25 UTC
Last enriched: 08/06/2026, 16:59:49 UTC
Last updated: 09/11/2026, 22:06:32 UTC
Views: 44
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.