PT-2026-64192 · Google · Google Chrome

CVE-2026-16806

·

Published

2026-07-23

·

Updated

2026-08-31

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.186
Description A use-after-free issue exists in WebMCP, which occurs when an application continues to use a pointer after it has been freed, potentially leading to memory corruption. This flaw allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML page.
Recommendations Update Google Chrome to version 150.0.7871.186 or later.

Fix

DoS

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-16806
ECHO-779F-7C8E-76E9
OPENSUSE-SU-2026:11383-1
OPENSUSE-SU-2026:21453-1
OPENSUSE-SU-2026:21498-1

Affected Products

Google Chrome