EUVD-2026-50668
GHSA-3g8r-vcv3-r4mg
Severity by source
Sources disagree (Low–Critical)AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Physical access is the sole attack vector; no prior system privileges needed; full C/I/A impact post-exploitation with no scope change.
vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.
CVSS VectorVendor: Chrome
Lifecycle Timeline
5DescriptionCVE.org
Insufficient policy enforcement in Enterprise in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via physical access to the device. (Chromium security severity: Low)
AnalysisAI
Privilege escalation in Google Chrome Enterprise on macOS allows a local attacker with physical device access to bypass enterprise policy controls and gain elevated privileges. Affected are all Chrome versions prior to 151.0.7922.72 in managed Enterprise deployments on Mac. The attack requires physical presence at the target device, substantially limiting the threat surface, though the confidentiality, integrity, and availability impact is rated high once exploited. No public exploit identified at time of analysis.
Technical ContextAI
The vulnerability stems from CWE-693 (Protection Mechanism Failure) - specifically, insufficient enforcement of Enterprise policy controls within Google Chrome on macOS. Chrome Enterprise allows organizations to push managed policies governing browser behavior, feature access, and system integration via MDM or group policy. A failure in policy enforcement at the macOS platform layer means that a locally present attacker can circumvent these restrictions and escalate privileges, likely exploiting the gap between Chrome's policy parsing/application and the underlying macOS privilege model. The affected product is identified by CPE cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*, covering all Chrome versions before 151.0.7922.72 on Mac.
RemediationAI
Upgrade Google Chrome to version 151.0.7922.72 or later, which contains the vendor-released patch for this vulnerability. Enterprise administrators should ensure managed Mac endpoints are updated through their MDM or Chrome Browser Cloud Management console. The vendor advisory is published at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html. As a compensating control where immediate patching is not possible, organizations should enforce physical security measures - screen locking policies, BIOS/EFI passwords, and restricted physical access to managed Mac devices - to deny the physical presence prerequisite. Disabling unattended or kiosk-style deployments of unpatched Chrome instances on macOS would further reduce exposure. These controls carry minimal operational trade-offs in typical enterprise environments.
Same weakness CWE-693 – Protection Mechanism Failure
View allSame technique Privilege Escalation
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today