CVE-2026-16806

Vendor

Google

Product

chrome, chromium

Exposure class

Browser

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   Advisory MSRC 25 Jul 2026

   Chromium: CVE-2026-16806 Use after free in WebMCP

   This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

   Fix available CVE-2026-16806 Microsoft Google
2. 23
   CVE NVD 23 Jul 2026

   Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted…

   Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

   CVE-2026-16806 Google
3. 13
   Chrome release Chrome Releases 23 Jul 2026

   Stable Channel Update for Desktop

   The Stable channel has been updated to 150.0.7871.186/.187 for Windows and Mac and 150.0.7871.186 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security…

   CVE-2026-16807CVE-2026-16806CVE-2026-16805+1 more Google