CVE-2026-91712 is a race condition vulnerability in the Extensions subsystem of Google Chrome on Mac platforms before version 153.0.8010.47. Exploitation requires prior compromise of the renderer process and involves a crafted HTML page that can lead to arbitrary code execution outside the sandbox environment. This elevates the attacker's capabilities beyond the renderer sandbox restrictions. The vulnerability is rated high severity by Chromium security. Google has published a stable channel update to fix this issue.

Successful exploitation can allow an attacker who has compromised the renderer process to execute arbitrary code outside the sandbox, potentially leading to further system compromise beyond the browser sandbox protections.

Google has released an official stable channel update that fixes this vulnerability in Chrome version 153.0.8010.47. Users and administrators should update to this version or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.