CVE-2026-15899Patch(apple / chrome)

MEDIUMCVSS 9.6 · CRITICAL

Exploitation observed; activity peaked at 3 mentions and remains active

Immediate actions

Patch apple chrome systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

apple CVEs Back to dashboard

4.8/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_049796704.html

Other references

https://issues.chromium.org/issues/516987782

Weakness type (CWE)

CWE-416

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome
macos

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
11 mentions across 8 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 5 signals
Technical details provided in 7 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 5d ago at 3 mentions (2026-07-20); latest day: 1
11 total mentions across 8 days

Affected systems

Vendors

apple google

Products

chromemacos

1 version affected across 2 products

Deep dive

Activity timeline11 mentions / 8d

Signal classification4 categories

Patch

545.5%

Disclosure

327.3%

General

218.2%

Active Exploitation

19.1%

Referenced assets10 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-17	1	Patch1
2026-07-19	1	Active Exploitation1
2026-07-20	3	Disclosure2Patch1
2026-07-21	2	Disclosure1Patch1
2026-07-23	1	Patch1
2026-07-27	1	Patch1
2026-07-29	1	General1
2026-08-30	1	General1

Full discourse11 posts

connect24h@connect24h88d
Patch
ブラウザ更新を利用者任せにするな。これは全社対応案件だ。 Chrome 150は7月14日と16日の2回で計22件を修正し、うち5件がCritical。CVE-2026-15899、CVE-2026-15900、CVE-2026-15901はCameraCapture、GPU、NetworkのUse after freeだ。実悪用確認の記載はないが、業務の入口で待つ理由はない。自分ならEDRやMDMで150.0.7871.128/.129以上を棚卸しし、未達端末へ更新とChrome再起動を促す。chrome://settings/helpを案内して終わらず、全社の反映率まで追ってほしい。CSIRTの初動確認に保存推奨。 #セキュリティソース: https://www.jpcert.or.jp/wr/2026/wr260723.html#2
Post summary
The post reports three critical Chrome 150 CVEs (use‑after‑free in camera, GPU, network), emphasizes no confirmed exploitation yet, and urges corporate-wide patching and monitoring via EDR/MDR.
040851.4K
7.0K followersView on X
kawn@kawn202084d
Patch
Google が，Chrome 150.0.7871.128/.129 (Windows および Mac) および 150.0.7871.128 (Linux) をリリース． CVE ベースで 7 件（Critical 3 件　・CVE-2026-15899 　・CVE-2026-15900 　・CVE-2026-15901 High 4 件）の脆弱性に対処． https://x.com/kawn2020/status/2081549327282196623
Post summary
Google released Chrome 150.0.7871.128/129 to patch 7 CVEs, including 3 critical ones (CVE-2026-15899, 15900, 15901). No PoC, exploit, or active exploitation reports were mentioned.
1000051
92 followersView on X
Daily CyberSecurity@Daily_CyberSec94d
Patch
Chrome security update 150.0.7871.128 patches 7 flaws, including three critical use-after-free bugs in CameraCapture, GPU, and Network. Update now. #Chrome #GoogleChrome #CVE202615899 #UseAfterFree #BrowserSecurity #Chromium #CyberSecurity http://securityonline.info/chrome-security-update-cve-2026-15899/
Post summary
The tweet announces a Chrome update that patches seven vulnerabilities, notably three critical use‑after‑free bugs, urging users to install the new version.
00010352
12.5K followersView on X
IntegSec@integ_sec49d
General
CVE-2026-15899: Google Chrome CameraCapture Use-After-Free on Mac - What It Means for Your Business and How to Respond https://hubs.li/Q04vPvzV0
Post summary
The provided text is merely a headline with a link, offering no substantive information about the vulnerability, its exploitation, or mitigation.
0000044
36 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker82d
General
【緊急】CVE-2026-15899 GoogleのChromeに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/28/cve-2026-15899-chrome/ #IT #Security #cybersecurity
Post summary
The post announces CVE-2026-15899 as a serious Chrome vulnerability but offers no technical details, evidence of exploitation, or remediation guidance.
0000039
210 followersView on X
SecNews@SecNews_GR90d
Patch
CVE-2026-15899: Κρίσιμο UAF στο CameraCapture του Chrome — update σε 150.0.7871.128/.129 https://secn.ws/RBaw6h
Post summary
The post announces CVE-2026-15899, a critical use‑after‑free vulnerability in Chrome’s CameraCapture module, and recommends updating to version 150.0.7871.128/129 to apply the fix.
00000113
7.0K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds90d
Disclosure
CVE-2026-15899 Use After Free in CameraCapture Google Chrome Mac Prior to 150.0.7871.128 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-15899
Post summary
The entry announces a newly disclosed Use‑After‑Free vulnerability (CVE‑2026‑15899) affecting Chrome Mac versions prior to 150.0.7871.128, with no evidence of exploitation or mitigation.
0000079
4.1K followersView on X
Infoflowcloud@infoflowcloud90d
Disclosure
🚨*CVE* CVE-2026-15899 Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p… https://www.cve.org/CVERecord?id=CVE-2026-15899 ----- Traducción: CVE-2026-15899 Uso… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑15899, a use‑after‑free bug in Chrome on macOS that could allow sandbox escape, with no evidence of PoC or active exploitation.
0000031
93 followersView on X
CVE@CVEnew90d
Disclosure
CVE-2026-15899 Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p… https://www.cve.org/CVERecord?id=CVE-2026-15899
Post summary
The tweet announces a CVE detailing a use‑after‑free vulnerability that could allow sandbox escape in older Chrome versions on macOS, with no evidence of PoC, exploit, or active use.
00000726
57.8K followersView on X
TECHEPAGES@techepages91d
Patch
🚨 🚨 Google's issued its 2nd critical Chrome update in just 48 hours (150.0.7871.128/.129). It patched 7 security vulnerabilities in the browser. 🔴 CVE-2026-15899 — UAF in CameraCapture 🔴 CVE-2026-15900 — UAF in GPU 🔴 CVE-2026-15901 — UAF in Network 🟠 CVE-2026-15902 — UAF in Cast 🟠 CVE-2026-15903 — OOB read/write in V8 (found by OpenAI Codex Security) 🟠 CVE-2026-15904 — UAF in Ozone 🟠 CVE-2026-15905 — UAF in Aura No active exploitation reported. Update now 🌐🔒
Post summary
Google released a critical Chrome update that patches seven CVEs, none of which are actively exploited in the wild.
0000065
29 followersView on X
VulDB 🛡@vuldb92d
Active Exploitation
It is possible to see elevated activities targeting Google Chrome (CVE-2026-15899) https://vuldb.com/vuln/380087/cti
Post summary
The post signals that CVE‑2026‑15899, a vulnerability in Google Chrome, is currently attracting elevated threat activity, indicating likely active exploitation.
00000127
2.3K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	macos	-	-	-
App	google	chrome	-	-	-

Explore more

Back to dashboard apple CVEs google CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-15899

connect24h[verified]@connect24hPatch

The post reports three critical Chrome 150 CVEs (use‑after‑free in camera, GPU, network), emphasizes no confirmed exploitation yet, and urges corporate-wide patching and monitoring via EDR/MDR.

IntegSec[verified]@integ_secGeneral

The provided text is merely a headline with a link, offering no substantive information about the vulnerability, its exploitation, or mitigation.

SecNews[verified]@SecNews_GRPatch

The post announces CVE-2026-15899, a critical use‑after‑free vulnerability in Chrome’s CameraCapture module, and recommends updating to version 150.0.7871.128/129 to apply the fix.

TECHEPAGES[verified]@techepagesPatch

Google released a critical Chrome update that patches seven CVEs, none of which are actively exploited in the wild.

kawn@kawn2020Patch

Google released Chrome 150.0.7871.128/129 to patch 7 CVEs, including 3 critical ones (CVE-2026-15899, 15900, 15901). No PoC, exploit, or active exploitation reports were mentioned.

Daily CyberSecurity@Daily_CyberSecPatch

The tweet announces a Chrome update that patches seven vulnerabilities, notably three critical use‑after‑free bugs, urging users to install the new version.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerGeneral

The post announces CVE-2026-15899 as a serious Chrome vulnerability but offers no technical details, evidence of exploitation, or remediation guidance.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The entry announces a newly disclosed Use‑After‑Free vulnerability (CVE‑2026‑15899) affecting Chrome Mac versions prior to 150.0.7871.128, with no evidence of exploitation or mitigation.