Description
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
Published: 2026-09-15
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Arbitrary code execution outside the sandbox
Action: Patch Now
AI Analysis

Impact

A local attacker who has compromised the renderer process can exploit an incorrect reference resolution flaw in Chrome extensions on macOS, allowing execution of arbitrary code beyond the sandbox. The vulnerability is rooted in improper reference handling (CWE-386) and improper privileged escalation (CWE-706).

Affected Systems

Google Chrome for macOS versions earlier than 153.0.8010.47 are affected; the issue is observed on the desktop client and impacts any user running potentially compromised extensions.

Risk and Exploitability

The CVSS score of 8.1. EPSS score of less than 1% suggests low but non‑zero likelihood compromise of the renderer process, meaning it is not a network‑based remote exploit but could be leveraged by local malware or a privileged user. The vulnerability is not listed in CISA’s KEV catalog, which reduces the immediate exposure risk but does not eliminate the need for remediation.

Generated by OpenCVE AI on September 16, 2026 at 19:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Google Chrome to version 153.0.8010.47 or later.
  • Disable or uninstall unnecessary extensions to reduce the attack surface.
  • Keep macOS and other system components updated to limit the chance of renderer process compromise.

Generated by OpenCVE AI on September 16, 2026 at 19:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6506-1 chromium security update
History

Thu, 17 Sep 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Wed, 16 Sep 2026 00:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H'}

Wed, 16 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Title chromium-browser: chromium-browser: Incorrect reference resolution in Extensions
Weaknesses CWE-386
References
Metrics threat_severity

None

 cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

threat_severity

Important

Wed, 16 Sep 2026 00:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 15 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
Description Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
Weaknesses CWE-706
References

Subscriptions

Apple Macos
Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-09-17T03:56:17.698Z

Reserved: 2026-09-14T22:52:03.491Z

Link: CVE-2026-91727

cve-icon Vulnrichment

Updated: 2026-09-15T23:37:13.042Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-15T21:16:45.980

Modified: 2026-09-17T17:54:03.320

Link: CVE-2026-91727

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-15T20:41:28Z

Links: CVE-2026-91727 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-16T19:30:06Z

Weaknesses
  • CWE-386

    Symbolic Name not Mapping to Correct Object

  • CWE-706

    Use of Incorrectly-Resolved Name or Reference