Threats Tagged 'cve-2026-19153'

This security update for Chromium addresses multiple critical vulnerabilities including numerous use-after-free issues, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These vulnerabilities affect various components such as WebGL, Aura, Skia, V8, GPU, Views, and others. The update fixes these issues in Chromium version 151.0.7922.108. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

A high-severity vulnerability in Google Chrome prior to version 151.0.7922.109 involves insufficient validation of untrusted input in Workers. This flaw allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. The vulnerability has a CVSS score of 8.1, indicating a significant risk to confidentiality and integrity. No known exploits are reported in the wild. A vendor advisory link is provided but does not explicitly state the patch status.