CVE-2026-19154 is a use-after-free vulnerability in the Skia graphics library used by Google Chrome on Android. The flaw allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape by crafting malicious HTML content. This vulnerability affects Chrome versions prior to 151.0.7922.109 on Android. The CVSS 3.1 score is 8.3, reflecting network attack vector, high attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escape the sandbox environment of the renderer process, potentially leading to full compromise of the affected system's security boundaries. This could result in unauthorized access to sensitive information, modification of data, or denial of service.

A fix is available in Google Chrome for Android version 151.0.7922.109 and later. Users and administrators should update to this version or a later one to remediate the vulnerability. No additional vendor advisory content was provided; therefore, patch status is inferred from the version information in the description.