What is the CVSS score of CVE-2026-16413?

CVE-2026-16413 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Google are affected by CVE-2026-16413?

Google Chrome prior to version 150.0.7871.182 contains a sandbox escape vulnerability that could allow attackers to break out of the browser's security boundaries after compromising the renderer…. A patch is available.

How to fix or mitigate CVE-2026-16413?

Within 24 hours, update Google Chrome to version 150.0.7871.182 or later by applying the vendor-released patch through automatic updates or enterprise deployment tools. Within 7 days, verify that all Chrome instances across the organization are updated and review logs for any signs of prior exploitation. Within 30 days, assess the effectiveness of the patch deployment and consider implementing browser isolation or sandboxing solutions as additional layers of defense.

Google CVE-2026-16413

EUVD-2026-47568 HIGH

Out-of-bounds Write (CWE-787)

2026-07-21 chrome-cve-admin@google.com

GHSA-76gg-4g7v-rm48

Buffer Overflow Google Memory Corruption Suse

8.3

CVSS 3.1 · Vendor: google

Severity by source

Vendor (google) PRIMARY

8.3 HIGH

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

SUSE

CRITICAL

qualitative

Primary rating from Vendor (google).

CVSS VectorVendor: google

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 12:01 vuln.today

CVSS changed

Jul 24, 2026 - 13:22 NVD

8.3 (HIGH)

CVE Published

Jul 21, 2026 - 23:16 cve.org

HIGH 8.3

CVE Published

Jul 21, 2026 - 23:16 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Sandbox escape in Google Chrome prior to 150.0.7871.182 via an out-of-bounds write in the ANGLE graphics layer allows remote attackers to escape the browser sandbox after compromising the renderer process. No active exploitation or public exploit has been confirmed; EPSS likelihood is very low.