CVE Catalog

CVE-2026-16416

CriticalCVSS 9.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.09%

1th percentile - higher than 1% of all known CVEs

Summary

In Google Chrome prior to 150.0.7871.182, an integer overflow in Chromecast allows a local attacker to potentially perform a sandbox escape via malicious network traffic.

Risk Assessment

This vulnerability allows a local attacker to escape the browser sandbox and execute code in the system context, potentially leading to full compromise.

Recommendation

Upgrade Google Chrome to version 150.0.7871.182 or later.

Original NVD description (English source)

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS