CVE-2026-19556 is a use-after-free vulnerability in the V8 engine of Google Chrome before version 151.0.7922.137. Exploitation requires user interaction (UI required) and can lead to remote code execution inside the sandbox environment. The vulnerability has a CVSS 3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. There is no explicit patch link provided, but the fixed version is identified as 151.0.7922.137.

Successful exploitation allows a remote attacker to execute arbitrary code within the sandboxed environment of Google Chrome, potentially compromising browser security and user data confidentiality, integrity, and availability. The attack vector is network-based with low attack complexity and no privileges required, but user interaction is necessary.

A fix is available in Google Chrome version 151.0.7922.137. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client software vulnerability, patching the browser is the recommended mitigation. No additional vendor advisory content is provided, so check official Google Chrome security advisories for confirmation and further guidance.