CVE-2026-19138 is a heap buffer overflow vulnerability in the CrashReporting feature of Google Chrome before version 151.0.7922.109. An attacker who has compromised the renderer process can exploit this vulnerability by delivering a crafted HTML page, potentially enabling sandbox escape. This vulnerability is tracked as CWE-122 (Heap-based Buffer Overflow) and has a high severity rating. No known exploits in the wild have been reported, and no patch links are currently provided in the data.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, potentially leading to full compromise of the browser process with high confidentiality, integrity, and availability impacts as indicated by the CVSS vector. This could enable execution of arbitrary code outside the sandbox restrictions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links are provided, users should monitor official Google Chrome security advisories for updates and apply the official fix once available.