cve-2026-12009

CVE-2026-12009 is a critical Chrome Accessibility sandbox escape vulnerability affecting Google Chrome on macOS before version 149.0.7827.115. Published by Google on June 11, 2026, this flaw allows an attacker who has already compromised the renderer process to escape the browser sandbox via a crafted HTML page. While the vulnerability is specific to macOS, it highlights the broader risk of browser sandbox escapes in modern attack chains. For Windows users, the key takeaway is the importance of prompt patching, browser diversity, and endpoint security measures to mitigate similar threats. Discussions on WindowsForum emphasize that sandbox escapes are a growing concern across platforms, reinforcing the need for vigilant update practices.