CVE-2026-17865

Details

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

Affected Packages

Google Chrome

macOS 12macOS 13macOS 14macOS 15macOS 26

Fixed in:

151.0.7922.72

com.google.Chrome

macOS 12macOS 13macOS 14macOS 15macOS 26

Fixed in:

151.0.7922.72

References

WEB

https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html

WEB

https://issues.chromium.org/issues/520516655

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-17865