CVE Catalog
CVE-2026-17855
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.20%
9th percentile - higher than 9% of all known CVEs
Summary
A race condition in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
Sandbox escape could allow the attacker to execute code outside browser restrictions, posing a serious threat to system security.
Recommendation
It is recommended to immediately update Google Chrome to version 151.0.7922.72 or later.
Original NVD description (English source)
Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)