Google Chrome Multiple Vulnerabilities
CSIRTS triage
- What
- Multiple vulnerabilities have been identified in Google Chrome.
- Who is affected
- Deployments of Google Chrome are affected.
- Urgency
- Remediation is not urgent as there is no known exploitation.
- Action
- Monitor for updates and apply patches when available.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Chrome
Get an email when a new Chrome advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260724
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-168040.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
- Low exploitation riskCVE-2026-168050.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all scored CVEs.
- Low exploitation riskCVE-2026-168060.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all scored CVEs.
- Low exploitation riskCVE-2026-168070.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-16804 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-16805 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-16806 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-16807 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownDSA-6408-1 chromium - security updatedebian
- high[NEW] [high] Google Chrome: Multiple vulnerabilities allow unspecified attackcert-bund
- unknownMicrosoft Edge Multiple Vulnerabilitieshkcert
- unknownMultiple vulnerabilities in Microsoft Edge (July 27, 2026)cert-fr-avis
- unknownMultiple vulnerabilities in Google Chrome (July 24, 2026)cert-fr-avis
- highCVE-2026-16807: Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attack…nvd
- highCVE-2026-16806: Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to…nvd
- highCVE-2026-16805: Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to …nvd
- highCVE-2026-16804: Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who…nvd
- unknownCVE-2026-16805: Chromium: CVE-2026-16805 Use after free in Blinkmsrc
- unknownCVE-2026-16806: Chromium: CVE-2026-16806 Use after free in WebMCPmsrc
- unknownCVE-2026-16804: Chromium: CVE-2026-16804 Use after free in Inputmsrc
More from HKCERT Security Bulletins
- unknownGoogle Chrome Multiple Vulnerabilities2026-07-30
- unknownCisco Secure Firewall Management Center Software Information Disclosure Vulnerability2026-07-30
- unknownIBM WebSphere Products Multiple Vulnerabilities2026-07-30
- unknownNode.js Multiple Vulnerabilities2026-07-30
- unknownXen Multiple Vulnerabilities2026-07-30