---
id: 10417
title: "CVE-2026-106378: Chrome GPU Sandbox Escape to RCE"
cve: CVE-2026-106378
source_domain: pwn.ai
source_url: "https://pwn.ai/blog/chrome-escape"
tags: ["rce"]
phying_url: "https://phying.com/item/10417"
lang: en
---

# CVE-2026-106378: Chrome GPU Sandbox Escape to RCE

## Summary

How an allowed WindowServer connection and inherited macOS event-posting permission let Chrome’s sandboxed GPU process inject keystrokes and launch apps outside the sandbox.

## Intelligence Metadata

- **Sources:** pwn.ai
- **CVE:** CVE-2026-106378
- **Original:** https://pwn.ai/blog/chrome-escape
- **Phying News:** https://phying.com/item/10417