CVE-2026-17752

Google · Chrome

A use after free vulnerability in the Views component of Google Chrome on Mac could lead to arbitrary code execution.

Executive summary

A use after free vulnerability in the Google Chrome Views component on Mac systems creates a significant risk of remote code execution.

Vulnerability

This is a use after free vulnerability located in the Views implementation. The attacker does not need to be authenticated, but the attack depends on user interaction to reach the vulnerable state.

Business impact

Exploitation of this vulnerability allows an attacker to gain control over the affected browser process. With a CVSS score of 8.8, this flaw represents a high-severity threat that could lead to the compromise of sensitive user data or unauthorized access to the host operating system.

Remediation

Immediate Action: Update Google Chrome for Mac to version 151.0.7922.72 or later to apply the necessary security patches.

Proactive Monitoring: Review security logs for anomalous browser behavior or unexpected system calls originating from the Chrome process.

Compensating Controls: Maintain updated security software on all macOS endpoints to identify and block exploit attempts targeting browser memory.

Exploitation status

Public Exploit Available: No (exploit_available: false)

Analyst recommendation

Given the potential for remote code execution, this update is critical for all macOS users running Google Chrome. Organizations should ensure that automatic updates are enabled or push the update via centralized management tools immediately.