This vulnerability in Google Chrome on Mac arises from incorrect reference resolution within Extensions. A local attacker who has compromised the renderer process can exploit this flaw to execute arbitrary code outside the sandbox environment by leveraging a local program. The issue was addressed in Chrome version 153.0.8010.47, as noted in the official Google Chrome stable channel update advisory.

Successful exploitation allows a local attacker with control over the renderer process to execute arbitrary code outside the sandbox, potentially leading to privilege escalation and compromise of the host system. The vulnerability undermines the sandbox security model that isolates web content from the underlying operating system.

A fix is available in Google Chrome version 153.0.8010.47. Users and administrators should update Chrome on Mac to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html for update instructions.