CVE-2026-17864 Google CVE debrief

Who should care

System administrators and security teams responsible for Google Chrome installations on Mac systems should prioritize patching this vulnerability to prevent potential privilege escalation attacks. They should also review and update incident response plans for potential privilege escalation attacks and monitor for suspicious local file activity. Additionally, security teams should verify Chrome versions on Mac systems and review local file activity for potential exploitation. This vulnerability can be mitigated by implementing compensating controls for privilege escalation and reviewing and updating incident response plans for potential privilege escalation attacks. Security teams should also track exceptions, retest remediated assets, and close the item only after evidence is documented. This vulnerability can be exploited by a local attacker, so security teams should focus on protecting against local attacks. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity, so security teams should prioritize patching this vulnerability. The vulnerability affects Google Chrome on Mac systems prior to version 151.0.7922.72, so security teams should focus on patching these systems. Security teams should also review and update incident response plans for potential privilege escalation attacks and monitor for suspicious local file activity. Security teams should verify Chrome versions on Mac systems and review local file activity for potential exploitation. Compensating controls for privilege escalation should be implemented to mitigate this vulnerability. Security teams should review and update incident response plans for potential privilege escalation attacks and monitor for suspicious local file activity. Security teams should prioritize patching this vulnerability to prevent potential privilege escalation attacks. Security teams should also review and update incident response plans for potential privilege escalation attacks and monitor for suspicious local file activity. Security teams should verify Chrome versions on Mac systems and review local file activity for potential exploitation. Security teams should implement compensating controls for to

Technical summary

The CVE-2026-17864 vulnerability is caused by an inappropriate implementation in the Updater component of Google Chrome on Mac systems prior to version 151.0.7922.72. This vulnerability allows a local attacker to perform OS-level privilege escalation via a malicious file. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. The Updater component is responsible for updating Google Chrome to the latest version. An attacker can exploit this vulnerability by creating a malicious file that can be used to escalate privileges on a Mac system. To prevent exploitation, system administrators and security teams should prioritize patching this vulnerability and review and update incident response plans for potential privilege escalation attacks.

Defensive priority

Medium severity vulnerability in Google Chrome on Mac allows local attackers to escalate privileges.

Recommended defensive actions

• Inventory and verify Google Chrome versions on Mac systems
• Apply updates to Google Chrome to version 151.0.7922.72 or later
• Monitor for suspicious local file activity
• Implement compensating controls for privilege escalation
• Review and update incident response plans for potential privilege escalation attacks

Evidence notes

The CVE-2026-17864 record indicates a Medium severity vulnerability in Google Chrome on Mac prior to version 151.0.7922.72, allowing local attackers to perform OS-level privilege escalation via a malicious file. The NVD entry is currently Analyzed. Evidence is limited to CVE and NVD details. Defenders should verify Chrome versions on Mac systems and review local file activity for potential exploitation.

Official resources