Threats Tagged 'cve-2026-19152'

This security update for Chromium addresses multiple critical vulnerabilities including numerous use-after-free issues, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These vulnerabilities affect various components such as WebGL, Aura, Skia, V8, GPU, Views, and others. The update fixes these issues in Chromium version 151.0.7922.108. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19152 is a high-severity vulnerability in Google Chrome prior to version 151.0.7922.109. It involves insufficient policy enforcement in the Navigation component, which could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This vulnerability affects Chrome desktop versions before 151.0.7922.109. The CVSS score is 8.3, indicating a high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vendor advisory linked does not explicitly confirm patch availability or remediation status.