CVE-2026-17855 is a race condition vulnerability in the DevTools of Google Chrome on Mac platforms before version 151.0.7922.72. An attacker with control over the renderer process can exploit this flaw via a crafted HTML page to perform a sandbox escape, potentially leading to full compromise of the browser environment. The vulnerability is rated critical with a CVSS 3.1 base score of 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor has released a stable channel update to remediate this issue.

Successful exploitation allows a remote attacker who has compromised the renderer process to escape the Chrome sandbox on Mac, potentially gaining higher privileges and broader system access. This can lead to full compromise of the affected system's security posture within the browser context.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for details.