Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san…

CVE-2026-17711 is a high-severity vulnerability in Google Chrome on macOS affecting versions prior to 151.0.7922.72. The flaw involves a race condition in the Downloads component of the browser. An attacker who has already compromised the renderer process can exploit this vulnerability to potentially escape the Chrome sandbox. Exploitation requires the victim to visit a specially crafted HTML page. The vulnerability is rated High severity by the Chromium security team. A fix has been released in Chrome stable channel version 151.0.7922.72. The issue is tracked in the Chromium bug tracker under issue 519996040.