CVE-2026-19152 describes insufficient policy enforcement in the navigation component of Google Chrome before version 151.0.7922.109. This flaw permits a remote attacker, having already compromised the renderer process, to potentially perform a sandbox escape by leveraging a specially crafted HTML page. The sandbox escape could allow the attacker to break out of the restricted execution environment, increasing the impact of an initial compromise. The vulnerability is rated high severity by Chromium security, but no CVSS score is provided. There are no known exploits in the wild. The issue is resolved in Chrome version 151.0.7922.109.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox, potentially gaining higher privileges or broader access on the affected system. This increases the risk and impact of an initial renderer compromise. However, there are no reports of active exploitation in the wild at this time.

Users and administrators should update Google Chrome to version 151.0.7922.109 or later, where this vulnerability is fixed. Since this is a client application, applying the official update is the recommended and effective mitigation. No additional vendor advisories indicate alternative mitigations or that no action is required.