Threats Tagged 'cve-2026-19147'

This security update for Chromium addresses multiple critical vulnerabilities including numerous use-after-free issues, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These vulnerabilities affect various components such as WebGL, Aura, Skia, V8, GPU, Views, and others. The update fixes these issues in Chromium version 151.0.7922.108. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19147 is a use-after-free vulnerability in the Aura component of Google Chrome on Linux versions prior to 151.0.7922.109. This flaw allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by using a crafted HTML page. The vulnerability has a high severity rating and a CVSS score of 8.3.