Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-23T21:36:43 chromium-browser: Chromium: Arbitrary code execution via use after free vulnerability in WebMCP 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

A flaw was found in WebMCP, a component of Google Chrome. This vulnerability, known as a use-after-free, allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can occur when a user visits a specially crafted HTML page, potentially leading to unauthorized control over the affected system.

This vulnerability is rated Important as it allows a remote attacker to achieve arbitrary code execution within the Chromium browser's sandbox. The flaw, a use-after-free in the WebMCP component, is triggered when a user navigates to a specially crafted HTML page, posing a significant risk of unauthorized system control. https://www.cve.org/CVERecord?id=CVE-2026-16806 https://nvd.nist.gov/vuln/detail/CVE-2026-16806 https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01320465736.html https://issues.chromium.org/issues/522064153