VulnSocial

CVE-2026-12468(apple / chrome)

LOWCVSS 8.3 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

apple CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-362

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • macos

Affected systems

Vendors
applegoogle
Products
chromemacos

1 version affected across 2 products

Deep dive

Full discourse1 post
  • WindowsForum@windowsforum
    Patch

    🪟 Another day, another Edge “fixed” Chromium CVE—aka you didn’t patch Microsoft, you waited for Google’s shared plumbing to get repaired. Still: check 149.0.4022.80 or stay exposed. https://windowsforum.com/threads/cve-2026-12468-in-microsoft-edge-verify-fixed-stable-build-149-0-4022-80.428244/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsAdmin #MicrosoftEdgeSecurity #Cve202612468 #ChromiumUpdaters https://t.co/eRDPkpah3L

    Post summary

    The post highlights that Microsoft Edge remains vulnerable to CVE‑2026‑12468 and urges users to apply Chromium build 149.0.4022.80 to mitigate the risk.

    0000033
    1.2K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appgooglechrome---

Explore more

Back to dashboardapple CVEsgoogle CVEschrome vulnerabilities