The vulnerability identified as CVE-2026-19143 affects Google Chrome on Android versions before 151.0.7922.109. It arises from insufficient validation of untrusted input within WebAPKs, which could enable a local attacker to perform a sandbox escape using a crafted malicious file. This type of vulnerability is categorized under CWE-20 (Improper Input Validation). There is no explicit patch or remediation information available in the provided data, and no known exploits have been reported in the wild.

If exploited, this vulnerability could allow a local attacker to break out of the sandbox environment on affected devices, potentially leading to unauthorized access or control beyond the intended application boundaries. The severity is considered high by Chromium security standards. However, no active exploitation has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply any forthcoming patches promptly. Until a fix is available, limiting local access to trusted users may reduce risk.