CVE-2026-106378

Summary

A privilege escalation vulnerability in Chrome's sandbox on macOS allows remote attackers to execute arbitrary code outside the sandbox after compromising the renderer process. This creates a significant security risk as it breaks the core sandboxing protection that isolates browser processes.

Exploitability

Exploitation requires a remote attacker to first compromise the renderer process, then craft a malicious HTML page that triggers the sandbox escape, making it moderately difficult but achievable with a successful initial compromise.

Blast radius

The vulnerability affects all Chrome users on macOS prior to version 155.0.8059.39, potentially exposing millions of users to remote code execution attacks that could lead to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome 155.0.8059.39 or later immediately

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.