{"type":"analysis","id":"analysis:research-chrome-s-macos-gpu-sandbox-escape-is-fixed-in-155-only-old-playwright-pins","slug":"research-chrome-s-macos-gpu-sandbox-escape-is-fixed-in-155-only-old-playwright-pins","title":"Chrome's macOS GPU sandbox escape is fixed in 155; only old Playwright pins still bundle a pre-fix Chromium","description":"CVE-2026-106378 is a second-stage macOS escape fixed in Chrome 155.0.8059.39. Current Playwright and Puppeteer bundle newer builds, but agents pinned to older releases on Macs with Accessibility permission are worth checking.","published_at":"2026-11-10T17:00:00.000Z","updated_at":"2026-11-10T17:00:00.000Z","record_date":"2026-11-10","topics":["sandbox","agents","google","research"],"source_urls":["https://pwn.ai/blog/chrome-escape","https://github.com/microsoft/playwright/releases/tag/v1.64.0","https://github.com/microsoft/playwright/releases/tag/v1.63.0","https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://www.tenable.com/cve/CVE-2026-106378","https://github.com/puppeteer/puppeteer/releases/tag/puppeteer-core-v25.14.0"],"language":"en","routes":{"html":"https://newruntime.com/analysis/research-chrome-s-macos-gpu-sandbox-escape-is-fixed-in-155-only-old-playwright-pins/","markdown":"https://newruntime.com/analysis/research-chrome-s-macos-gpu-sandbox-escape-is-fixed-in-155-only-old-playwright-pins.md","json":"https://newruntime.com/analysis/research-chrome-s-macos-gpu-sandbox-escape-is-fixed-in-155-only-old-playwright-pins.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"deep_research:aff42733-6436-4227-9384-0346d0dfc488","authorial_article_id":"aff42733-6436-4227-9384-0346d0dfc488"},"next_reads":[{"type":"topic","path":"/topics/sandbox/","url":"https://newruntime.com/topics/sandbox/","title":"Sandbox","reason":"Explore the sandbox topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/sandbox.md","json_url":"https://newruntime.com/topics/sandbox.json"},{"type":"topic","path":"/topics/agents/","url":"https://newruntime.com/topics/agents/","title":"Agents","reason":"Explore the agents topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agents.md","json_url":"https://newruntime.com/topics/agents.json"},{"type":"topic","path":"/topics/google/","url":"https://newruntime.com/topics/google/","title":"Google","reason":"Explore the google topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/google.md","json_url":"https://newruntime.com/topics/google.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}