EUVD-2026-48440

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-48441

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-48442

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-48443

Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-16804

The CVE-2026-16804 entry affects Google Chrome prior to 150.0.7871.186, where a use-after-free in Input can be exploited by a remote attacker who already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. Affected component and root cause are specif...

CVE-2026-16805

CVE-2026-16805 describes a use-after-free in Blink affecting Google Chrome prior to version 150.0.7871.186. The vulnerability allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Exploitation details are not provided in the documents beyond this de...

CVE-2026-16807

CVE-2026-16807 describes an out-of-bounds write in Chrome’s Codecs that affects Google Chrome versions prior to 150.0.7871.186 . The vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The connected documents confirm the flaw resides in Chr...

CVE-2026-16806

The connected records describe CVE-2026-16806 as a Use-After-Free vulnerability in WebMCP within Google Chrome, exploitable via a crafted HTML page to run arbitrary code inside the browser sandbox. Affected product: Google Chrome prior to 150.0.7871.186. Root cause: use-after-free in WebMCP. Impa...

PT-2026-64192

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-64193

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-64190

Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-64191

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-13036

A flaw was found in Blink, a rendering engine used in Google Chrome. This vulnerability, a 'use after free' error, allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a...

CVE-2026-13034

A flaw was found in Google Chrome's Passwords feature. A remote attacker could exploit this vulnerability by compromising the browser's rendering engine and then using a specially designed web page. This could allow the attacker to bypass security measures designed to isolate websites, potentiall...

CVE-2026-13022

A flaw was found in Google Chrome's Autofill feature. A remote attacker, after compromising the browser's renderer process, could exploit an inappropriate implementation to leak sensitive data from other websites. This vulnerability is triggered by a specially crafted HTML page, leading to...

CVE-2026-16424

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:29+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraj5tlbai2v 2026-07-22 14:55:25+00:00| seen|...

CVE-2026-16422

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:24+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g...

CVE-2026-16421

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:22+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-22 22:49:01+00:00| seen|...

CVE-2026-16420

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-22 22:49:01+00:00| seen|...

CVE-2026-16419

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:17+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g...