CyberRota Analysis
AI-GeneratedA critical vulnerability in the Crypto component of Google Chrome for Mac allows remote attackers to escape the browser's sandbox by exploiting a compromised renderer process through a specially crafted HTML page. This could lead to unauthorized access to sensitive data or system resources. Organizations using affected versions of Chrome should prioritize patching to mitigate potential exploitation risks.
CVE
CVE-2026-17865
Severity
CRITICAL
CVSS
9.6
EPSS
0.28%
Chrome
Original NVD Description
Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)