CVE-2026-106412

Summary

A race condition in Google Chrome's Core on macOS allows remote attackers to execute arbitrary code outside the sandbox after compromising the renderer process through social engineering. This represents a critical privilege escalation vulnerability that can lead to full system compromise.

Exploitability

Exploitation requires compromising the renderer process and leveraging social engineering to convince users to visit a malicious page, making it moderately difficult but achievable with targeted attacks.

Blast radius

The vulnerability affects all Chrome users on macOS prior to version 155.0.8059.39, potentially impacting millions of users who could be tricked into visiting malicious websites and losing full system control.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome 155.0.8059.39 or later immediately

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.