Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a craf…

CVE-2026-18015 describes an inappropriate implementation in the Tint component of Google Chrome on macOS, affecting versions prior to 151.0.7922.72. The vulnerability allows a remote attacker to potentially perform a sandbox escape by convincing a user to visit a crafted HTML page. The issue is classified as Low severity by the Chromium security team, though it carries a high Kans value indicating elevated tracking priority. The flaw is specific to the macOS platform and does not appear to affect other operating systems. Google addressed the issue in the stable channel update released in July 2026. No active exploitation in the wild has been confirmed in the available information. Users are advised to update to Chrome version 151.0.7922.72 or later to mitigate the risk.