CVE-2026-19155 is a use-after-free vulnerability in the Payments feature of Google Chrome before version 151.0.7922.109. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, which could lead to full compromise of the browser environment. The vulnerability is classified under CWE-416 (Use After Free) and has a CVSS 3.1 base score of 8.3, indicating high severity. No known exploits in the wild have been reported, and no explicit patch links are provided in the data, but the fixed version is identified as 151.0.7922.109 or later.

Successful exploitation could allow an attacker to escape the sandbox environment of the Chrome renderer process, potentially leading to arbitrary code execution with elevated privileges. This impacts confidentiality, integrity, and availability of the affected system.

A fix is available in Google Chrome version 151.0.7922.109 and later. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update to the client software.