


Perceptive Security
SOC/SIEM Consultancy

Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to poten…
Published:
30 July 2026 at 00:00:00
Alert date:
30 July 2026 at 19:11:53
Source:
nvd.nist.gov
Web Technologies, Zero-Day Vulnerabilities, Operating Systems
CVE-2026-17710 is a high-severity vulnerability in Google Chrome on macOS affecting versions prior to 151.0.7922.72. The flaw stems from an inappropriate implementation in the MHTML component of Chrome. A remote attacker who has already compromised the renderer process could exploit this vulnerability to perform a sandbox escape. The attack vector requires a crafted HTML page to trigger the vulnerability. This is classified as High severity by the Chromium security team. The issue has been addressed in the stable channel update released for desktop. Users are advised to update to Chrome version 151.0.7922.72 or later on Mac to mitigate the risk.
Technical details
Mitigation steps:
Affected products:
Google Chrome on Mac (prior to 151.0.7922.72)
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-17710
https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html
https://issues.chromium.org/issues/519991712
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
