Threats Tagged 'cve-2026-19156'

This security update for Chromium addresses multiple critical vulnerabilities including numerous use-after-free issues, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These vulnerabilities affect various components such as WebGL, Aura, Skia, V8, GPU, Views, and others. The update fixes these issues in Chromium version 151.0.7922.108. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

A heap buffer overflow vulnerability exists in the Base component of Google Chrome prior to version 151.0.7922.109. This flaw could be exploited by an attacker who convinces a user to install a malicious Chrome extension, potentially leading to heap corruption. The vulnerability has a high severity rating with a CVSS score of 7.5. No confirmed exploits in the wild have been reported. The vendor advisory indicates a stable channel update addressing this issue is available.