CVE-2026-17716

Undergoing Analysis Undergoing Analysis - In Progress

Use After Free in Google Chrome Updater on Mac

Publication date: 2026-07-30

Last updated on: 2026-08-10

Assigner: Chrome

Description

Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via malicious network traffic. (Chromium security severity: High)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-08-10

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17716

EUVD

EUVD-2026-50842

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in the Updater component of Google Chrome on Mac. It occurs when the program tries to use memory that has already been freed, potentially allowing an attacker to execute arbitrary code or escalate privileges through malicious network traffic.

Detection Guidance

This vulnerability is specific to Google Chrome on Mac and involves a use-after-free issue in the Updater component. Detection primarily involves checking the Chrome version and monitoring for unusual activity. Ensure Chrome is updated to version 151.0.7922.72 or later. No direct commands are provided in the context to detect exploitation, but you can verify the installed version using 'google-chrome --version' on Mac.

Impact Analysis

An attacker could exploit this to gain elevated privileges on your system, potentially allowing them to install malware, access sensitive data, or take control of your computer. It requires malicious network traffic but could lead to serious security breaches.

Compliance Impact

This vulnerability involves a use-after-free issue in Google Chrome's Updater on Mac, enabling privilege escalation via malicious network traffic. Such vulnerabilities could potentially lead to unauthorized access or data breaches, which may impact compliance with GDPR or HIPAA by compromising data integrity or confidentiality.

Mitigation Strategies

Update Google Chrome on Mac to version 151.0.7922.72 or later to address the use after free vulnerability in the Updater component.

Hi! I’m here to help you understand CVE-2026-17716. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70