This vulnerability (CVE-2026-17996) affects Google Chrome on Mac platforms before version 151.0.7922.72. It is caused by an inappropriate implementation in the browser that permits a local attacker to bypass navigation restrictions via a crafted malicious file. The issue is classified under CWE-284 (Improper Access Control). The CVSS v3.1 base score is 6.2, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory is available but does not explicitly state patch availability or remediation details.

An attacker with local access to a vulnerable Mac system running Google Chrome prior to 151.0.7922.72 can bypass navigation restrictions, potentially leading to unauthorized actions that affect the integrity of the browser environment. There is no impact on confidentiality or availability. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official confirmation of a fix, users should apply updates promptly once available and exercise caution with local file handling.