Threadlinqs IntelligenceStart free

VulnerabilityCVE-2026-15899Published 2026-07-20

CVE-2026-15899 — Google Chrome

As of 2026-07-20, CVE-2026-15899 is a vulnerability in Google Chrome. Threadlinqs Intelligence links 1 tracked threat campaign to CVE-2026-15899, most recently “Multiple Vulnerabilities in Google Chrome Enable Remote Code Execution and Information Disclosure (CVE-2026-15899 through CVE-2026-15905)”.

CVSS
—Not yet scored
EPSS
—No EPSS score yet
CISA KEV
NoNot in the KEV catalog
Tracked threats
1Campaigns referencing it
Published
Published 2026-07-20

Last updated:

What is CVE-2026-15899?

Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

The record classifies CVE-2026-15899 under weakness class CWE-416. 1 affected-product entry is recorded, across 1 vendor, listed below. The identifier was first published 100 days ago.

Severity and exploitation probability

CISA KEV
Not listed in the CISA Known Exploited Vulnerabilities catalog
Published
2026-07-20

Is CVE-2026-15899 being exploited?

It currently carries a trending score of 30 in the Threadlinqs vulnerability feed.

Affected products and versions

How to fix CVE-2026-15899

No vendor patch reference has been recorded for CVE-2026-15899 in the tracked sources. Follow the references below for a fix, and treat the products listed above as exposed until the vendor states otherwise.

Threat activity tracking CVE-2026-15899

1 tracked threat in the Threadlinqs corpus references CVE-2026-15899, either in the campaign’s CVE list or as an indicator on the campaign record.

Sources

Enriched from CVE.org, NVD. Last verified by Threadlinqs on . This product uses the NVD API but is not endorsed or certified by the NVD.

Other references