CVE-2026-16422 is a vulnerability in Google Chrome on Linux where insufficient validation of untrusted certificate input can be exploited by an attacker positioned within the network to spoof domains through malicious network traffic. The vulnerability affects Chrome versions before 150.0.7871.182. The Chromium security team rates this issue as high severity. The vendor advisory linked does not explicitly confirm patch availability or remediation status.

An attacker with privileged network access can exploit this vulnerability to spoof domains, potentially misleading users or systems relying on domain validation. This could facilitate phishing or man-in-the-middle attacks by presenting fraudulent certificates that appear legitimate due to improper validation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0256605430.html for current remediation guidance. Until official fixes are confirmed and applied, users should exercise caution when operating in untrusted or potentially compromised networks.