PT-2026-56641 · Google · Google Chrome

Published 2026-07-08 · Updated 2026-07-09 · CVE-2026-15122

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115

Description Insufficient validation of untrusted input in Codecs allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape is a technique used to break out of the restricted environment where the browser process runs to gain unauthorized access to the underlying system.

Recommendations Update Google Chrome to version 150.0.7871.115 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-15122

Affected Products

Google Chrome

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-15122 · Security Note
• https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html · Note
• https://twitter.com/CVEnew/status/2075092524155203877 · Twitter Post
• https://issues.chromium.org/issues/523717219 · Note
• https://twitter.com/infoflowcloud/status/2075094057101955122 · Twitter Post