CVE-2026-17784 is a use-after-free vulnerability in the Audio subsystem of Google Chrome on Mac platforms. It allows a remote attacker, who has already compromised the renderer process, to potentially perform a sandbox escape by leveraging a crafted HTML page. This vulnerability is rated with a CVSS 3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability. The issue affects Chrome versions prior to 151.0.7922.72. Google published a stable channel update that includes a fix for this vulnerability.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to arbitrary code execution with elevated privileges on the host system. This compromises the security boundaries intended to isolate web content from the underlying operating system, increasing the risk of system compromise.

Users should update Google Chrome on Mac to version 151.0.7922.72 or later, where this vulnerability has been fixed. The vendor advisory confirms the availability of an official fix. No additional mitigation steps are indicated beyond applying the update.