cve 2026 16806

Google has shipped an urgent Chrome security update for a high-severity memory-safety flaw in its emerging WebMCP capability, tracked as CVE-2026-16806. The vulnerability is a use-after-free bug that could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox after persuading...