CVE-2026-15899

CVSS 3.1: 9.6 critical
EPSS: <1%p33
Published: Jul 20, 2026 · Jul 20, 2026
Modified: Oct 24, 2026

Analyze CVE-2026-15899 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Vendors: google

Products: chrome

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

1 story

⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

The Hacker NewsJul 28, 05:26 UTC · Jul 28, 2026Exploit / PoCExploitedCVE-2026-16232 CVE-2025-66376 CVE-2026-54121+521 · 1 read