CVE-2026-17865 is a critical security vulnerability in Google Chrome on Mac platforms before version 151.0.7922.72. The flaw arises from an inappropriate implementation in the Crypto component, which can be exploited by a remote attacker who has already compromised the renderer process. Exploitation involves a crafted HTML page that may enable the attacker to perform a sandbox escape, thereby potentially gaining elevated privileges beyond the renderer sandbox. The vulnerability is tracked under CWE-693 and has a CVSS v3.1 base score of 9.6, indicating high impact on confidentiality, integrity, and availability.

Successful exploitation could allow a remote attacker to escape the Chrome renderer sandbox on Mac systems, potentially leading to full system compromise or execution of arbitrary code with higher privileges. The vulnerability affects confidentiality, integrity, and availability of the affected system.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for detailed update instructions.