CVE-2026-17654 Google CVE debrief

Who should care

IT administrators and security teams responsible for managing Google Chrome installations on Mac systems should be aware of this vulnerability and take immediate action to update affected systems to version 151.0.7922.72 or later. Additionally, organizations with strict security controls and those in high-risk environments should prioritize patching and monitoring for potential exploitation attempts.

Technical summary

CVE-2026-17654 is a critical vulnerability in Google Chrome on Mac systems, caused by a race condition in the Updater component. This vulnerability allows a local attacker to perform OS-level privilege escalation via a malicious file. The CVSS score for this vulnerability is 7.8, indicating high severity. Google has addressed this issue in Chrome version 151.0.7922.72 and later. The vulnerability affects Mac systems running Google Chrome prior to version 151.0.7922.72. Defensive priorities include immediate patching, inventory reviews, and monitoring for suspicious activity. Compensating controls should be reviewed for exposed systems while remediation is scheduled and verified. Relevant monitoring, detection, and logs should be checked for exposed assets that need extra review. Exceptions should be tracked, and remediated assets should be retested before closing the item. The CVE record indicates a critical vulnerability in Google Chrome on Mac systems, allowing for OS-level privilege escalation via a malicious file due to a race condition in the Updater component. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. Google has released a patch (version 151.0.7922.72) to address this issue. The Updater component is a critical system process that handles updates to Google Chrome. A race condition in this component can be exploited by a local attacker to gain elevated privileges on the system. The vulnerability can be mitigated by applying the Google Chrome update to version 151.0.7922.72 or later on affected Mac systems. Additionally, ensuring that all Mac systems running Google Chrome are inventoried and updated to the patched version can help prevent exploitation. Monitoring for any suspicious activity related to this vulnerability, especially in environments where local attackers may have access to Mac systems, is also recommended. The CVE record provides additional information on the vulnerability, including its CVSS score and severity classification. The NVD detail page for CVE-2026-17654 provides further information on the vulnerability, including its CVSS score and vulnerability information. The Google Chrome release notes for the

Defensive priority

This CVE requires immediate attention due to its high CVSS score of 7.8 and the potential for OS-level privilege escalation on Mac systems running Google Chrome prior to version 151.0.7922.72.

Recommended defensive actions

• Apply the Google Chrome update to version 151.0.7922.72 or later on affected Mac systems.
• Ensure that all Mac systems running Google Chrome are inventoried and updated to the patched version.
• Monitor for any suspicious activity related to this vulnerability, especially in environments where local attackers may have access to Mac systems.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE-2026-17654 record indicates a critical vulnerability in Google Chrome on Mac systems, allowing for OS-level privilege escalation via a malicious file due to a race condition in the Updater component. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. Google has released a patch (version 151.0.7922.72) to address this issue.

Official resources