Threats Tagged 'cve-2026-19143'

This security update for Chromium addresses multiple critical vulnerabilities including numerous use-after-free issues, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These vulnerabilities affect various components such as WebGL, Aura, Skia, V8, GPU, Views, and others. The update fixes these issues in Chromium version 151.0.7922.108. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2026-19143 is a high severity vulnerability in Google Chrome on Android affecting versions prior to 151.0.7922.109. It involves insufficient validation of untrusted input in WebAPKs, which could allow a local attacker to perform a sandbox escape via a malicious file. The vulnerability has a CVSS score of 8.6, indicating a significant impact on confidentiality, integrity, and availability. No known exploits are reported in the wild. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation status.