CVE-2026-19150 is a vulnerability in the V8 engine of Google Chrome before version 151.0.7922.109. It involves an inappropriate implementation that enables remote code execution inside the sandbox via a crafted HTML page. The vulnerability has a high severity rating and a CVSS 3.1 base score of 8.8, with attack vector network, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. No explicit patch links or vendor advisory details are provided in the input data.

Successful exploitation allows a remote attacker to execute arbitrary code within the sandboxed environment of the V8 engine in Google Chrome, potentially compromising the confidentiality, integrity, and availability of the affected system. This could lead to unauthorized code execution despite sandbox protections.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability affects versions prior to 151.0.7922.109, so updating to version 151.0.7922.109 or later is expected to remediate the issue once official patches are released. Until then, users should exercise caution with untrusted web content and consider applying any available temporary mitigations recommended by the vendor.