CVE-2026-17865 describes a medium severity vulnerability in Google Chrome on Mac systems before version 151.0.7922.72. The vulnerability arises from an inappropriate implementation in the Crypto module, which could enable a remote attacker with control over the renderer process to perform a sandbox escape via a crafted HTML page. This could lead to increased privileges or code execution outside the intended sandbox environment. The vendor advisory URL is provided but does not explicitly state the patch or remediation status in the input data.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to execution of code with higher privileges or access to restricted system resources. This elevates the risk beyond the renderer compromise, increasing the attack surface and potential damage. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until confirmation of a patch or fix, users should apply any available updates from Google Chrome promptly and follow vendor instructions. No additional mitigation recommendations are provided in the available data.