CVE-2026-18015

CriticalCVSS 9.6

Published: 30/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

In Google Chrome on Mac prior to version 151.0.7922.72, an inappropriate implementation in the Tint component allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Risk Assessment

This could allow an attacker to escape the sandbox and gain broader system access.

Recommendation

Update Google Chrome on Mac to version 151.0.7922.72 or later.

Original NVD description (English source)

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)