Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-23T21:36:43 chromium-browser: Google Chrome Codecs: Sandbox escape via crafted HTML page 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CWE-787

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

A flaw was found in the Codecs component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability through a specially crafted HTML page. This could potentially allow the attacker to bypass security restrictions and gain unauthorized access to the underlying system.

This flaw is rated as Important because a remote attacker could exploit an out-of-bounds write vulnerability in the Codecs component of Google Chrome, or applications embedding Chromium-based web engines, via a specially crafted HTML page. Successful exploitation could lead to a sandbox escape, allowing the attacker to bypass security restrictions and gain unauthorized access to the underlying system. https://www.cve.org/CVERecord?id=CVE-2026-16807 https://nvd.nist.gov/vuln/detail/CVE-2026-16807 https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01320465736.html https://issues.chromium.org/issues/518237034