CVE-2026-17919 describes a privilege escalation vulnerability in Google Chrome for Mac versions before 151.0.7922.72. The root cause is insufficient enforcement of enterprise policies, which can be exploited by a local attacker with physical access to the device to gain elevated privileges. The vulnerability is classified as low severity by the Chromium security team. There is no CVSS score available, and no explicit patch or remediation details are provided in the input data.

A local attacker with physical access to a Mac device running an affected version of Google Chrome could escalate their privileges due to insufficient policy enforcement in the Enterprise configuration. This could potentially allow the attacker to perform actions beyond their intended permission level. However, the severity is considered low, and no known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor official Google Chrome security advisories for updates and apply updates promptly once available. Restricting physical access to devices remains a general security best practice but is not a specific mitigation for this vulnerability.