CVE-2026-16418
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-16418
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
栈缓冲区溢出
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-16418
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-16418
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-16418 (1)
Other References for CVE-2026-16418 (1)
Same Patch Batch · Google · 2026-07-21 · 14 CVEs total
| CVE-2026-16423 | Chrome低于150.0.7871.182存在UAF漏洞 | |
| CVE-2026-16424 | Chrome Android <150.0.7871.182 GPU Use-After-Free沙箱逃逸 | |
| CVE-2026-16422 | Linux版Chrome<150.0.7871.182证书验证不足致域名伪造 | |
| CVE-2026-16419 | Chrome 150.0.7871.182以下版本存在越界读写漏洞 | |
| CVE-2026-16417 | Chrome<150.0.7871.182 Skia未初始化使用漏洞 | |
| CVE-2026-16415 | Chrome<150.0.7871.182漏洞：Untrusted Input验证不足 | |
| CVE-2026-16416 | Chrome <150.0.7871.182 Chromecast整型溢出致沙箱逃逸 | |
| CVE-2026-16414 | Chrome低于150.0.7871.182输入验证不足导致沙箱逃逸 | |
| CVE-2026-16413 | Chrome <150.0.7871.182 越界写入漏洞 | |
| CVE-2026-16421 | Chrome < 150.0.7871.182 WebAudio远程代码执行 | |
| CVE-2026-16420 | Chrome <150.0.7871.182 WebAudio类型混淆导致远程代码执行 | |
| CVE-2026-15432 | Observable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerification | |
| CVE-2026-15829 | SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox |
IV. Related Vulnerabilities
Same weakness: CWE-121
- CVE-2026-64831
FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Deco - CVE-2026-59144
Data::RingBuffer::Shared versions before 0.04 for Perl allow - CVE-2026-16461
Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump( - CVE-2026-15370
Libssh: libssh: stack buffer overflow in sftp server longnam - CVE-2026-48389
DNG SDK | Stack-based Buffer Overflow (CWE-121)
V. Comments for CVE-2026-16418
No comments yet