A race condition in the Chrome download subsystem on macOS allows a compromised renderer process to trigger a sandbox escape. The flaw occurs when a malicious HTML page causes a timing mismatch during a file download, enabling the renderer to gain higher privileges. The weakness is catalogued as a concurrency issue under CWE-362 and CWE-368.

Google Chrome browsers on macOS that run a version earlier than 151.0.7922.72 are affected. The issue is present in the stable channel and could impact any user who can cause the renderer process to load malicious content.

The CVSS score of 9.6 signals a high severity vulnerability. The EPSS score, currently below 1 %, indicates a low present exploitation likelihood, and the vulnerability is not listed in the CISA KEV catalog. An attacker must first compromise the renderer process—through a web page or a separate zero‑day exploit—before the race condition can be triggered. While exploitation is unlikely at present, the potential for remote code execution makes this a top priority for mitigation.