CVE-2026-19167 is an integer overflow vulnerability in the GPU subsystem of Google Chrome versions before 151.0.7922.109. Exploitation requires prior compromise of the renderer process and enables an attacker to leak cross-origin data through a specially crafted HTML page. The vulnerability is classified as high severity by Chromium security. The vendor advisory link is provided but does not explicitly state the patch or remediation status in the input data.

If exploited, this vulnerability can lead to unauthorized disclosure of cross-origin data by an attacker who has already compromised the renderer process. This could undermine the confidentiality of data from other origins within the browser context.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html for current remediation guidance. Since the affected version is prior to 151.0.7922.109, updating to version 151.0.7922.109 or later is likely recommended once confirmed by the vendor.