Threats Tagged 'cve-2026-19158'

This security update for Chromium addresses multiple critical vulnerabilities including numerous use-after-free issues, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These vulnerabilities affect various components such as WebGL, Aura, Skia, V8, GPU, Views, and others. The update fixes these issues in Chromium version 151.0.7922.108. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19158 is a use-after-free vulnerability in the Views component of Google Chrome on Windows. It affects versions prior to 151.0.7922.109 and can be triggered by specific user interface gestures when visiting a crafted HTML page. The vulnerability could lead to heap corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The issue has a high severity rating with a CVSS score of 7.5. No known exploits are reported in the wild. A vendor advisory is available but does not explicitly confirm the patch status.