Skip to main content

Google EUVDEUVD-2026-47567

| CVE-2026-16421 HIGH
Improper Input Validation (CWE-20)
2026-07-21 chrome-cve-admin@google.com GHSA-jmgx-g6r2-c5f2
8.8
CVSS 3.1 · Vendor: google
Share

Severity by source

Vendor (google) PRIMARY
8.8 HIGH
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
SUSE
CRITICAL
qualitative

Primary rating from Vendor (google).

CVSS VectorVendor: google

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Analysis Generated
Jul 26, 2026 - 12:00 vuln.today
CVSS changed
Jul 24, 2026 - 13:22 NVD
8.8 (HIGH)
CVE Published
Jul 21, 2026 - 23:16 cve.org
HIGH 8.8
CVE Published
Jul 21, 2026 - 23:16 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Arbitrary code execution inside the renderer sandbox in Google Chrome before version 150.0.7871.182 due to an input validation flaw in the WebAudio implementation when handling a crafted HTML page. An attacker can execute arbitrary code within the sandbox by luring a user to a malicious site. No active exploitation reported; a vendor patch is available.

Vendor StatusVendor

SUSE

Severity: Critical
Product Status
SUSE Package Hub 15 SP7 Fixed
openSUSE Leap 16.0 Fixed
openSUSE Tumbleweed Fixed
SUSE Package Hub 15 SP7 Affected

Share

EUVD-2026-47567 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy