CVE-2026-17855 is a race condition vulnerability in the DevTools feature of Google Chrome on Mac platforms before version 151.0.7922.72. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, increasing their privileges beyond the renderer sandbox. The vulnerability was publicly disclosed with medium severity, but no CVSS score or detailed exploit information is available. The vendor advisory linked corresponds to a stable channel update that presumably addresses this issue.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to greater control over the host system. This elevates the risk from a renderer compromise to a more severe system compromise. However, no active exploitation has been reported to date.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for details.