CVE-2026-19139 is a race condition vulnerability in the CredentialProvider of Google Chrome on Windows. It affects versions before 151.0.7922.109 and enables a local attacker to perform OS-level privilege escalation through a crafted malicious file. The vulnerability was assigned a high severity rating by Chromium security. There is no CVSS score available, and no explicit remediation level is stated in the source data. The vendor advisory URL points to a Chrome stable channel update announcement, implying a fix is available in version 151.0.7922.109.

Successful exploitation allows a local attacker to escalate privileges on the Windows operating system, potentially gaining elevated rights beyond their initial access. This could lead to unauthorized system modifications or control. The vulnerability does not appear to be exploited in the wild at the time of disclosure.

Users should update Google Chrome on Windows to version 151.0.7922.109 or later, as this version addresses the vulnerability. The vendor advisory indicates a stable channel update that includes the fix. No additional mitigation steps are specified or required beyond applying the update.