Overview
A second WebAudio flaw in the same Chrome release cycle. The component's audio processing logic takes a path it should not when handed a specific node graph.
A crafted HTML page reaches that path and runs code inside the renderer sandbox. Chromium rates it High. Fixed in Chrome 150.0.7871.182 on 21 July 2026, alongside CVE-2026-16420.
Affected products
- Google Chrome before 150.0.7871.182 (Windows, Mac) and 150.0.7871.181 (Linux)
Disclosure timeline
- 21 Jul 2026
- Chrome 150.0.7871.182 stable release with the fix; CVE-2026-16421 published