CVE-2026-17950 is a vulnerability in Google Chrome on Mac platforms where an inappropriate implementation in the Safebrowsing component permits a remote attacker to execute arbitrary code by delivering a malicious file. The vulnerability is classified under CWE-269 (Improper Privilege Management). It affects Chrome versions before 151.0.7922.72. The CVSS v3.1 base score is 8.8, indicating high impact with network attack vector, low attack complexity, no privileges required, user interaction required, and high confidentiality, integrity, and availability impacts. The vendor has published a stable channel update advisory but the exact patch status is not explicitly confirmed in the provided data.

Successful exploitation allows remote code execution on affected Mac systems running vulnerable Chrome versions, potentially leading to full compromise of the browser environment. The high CVSS score reflects significant confidentiality, integrity, and availability impacts. No known active exploitation has been reported at this time.

The vendor has published a stable channel update advisory for Chrome. Users should update to version 151.0.7922.72 or later to mitigate this vulnerability. Patch status is not explicitly confirmed in the provided data; therefore, users should consult the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for the latest remediation guidance.