Threats Tagged 'cve-2026-19148'

This security update for Chromium addresses multiple critical vulnerabilities including numerous use-after-free issues, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These vulnerabilities affect various components such as WebGL, Aura, Skia, V8, GPU, Views, and others. The update fixes these issues in Chromium version 151.0.7922.108. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19148 is a high-severity out-of-bounds write vulnerability in the GPU component of Google Chrome on Linux systems prior to version 151.0.7922.109. This flaw allows a remote attacker who has already compromised the renderer process to potentially escape the sandbox by using a specially crafted HTML page. The vulnerability affects Chrome versions before 151.0.7922.109 and was publicly disclosed on August 6, 2026.