Threats Tagged 'cve-2026-19166'

This security update for Chromium addresses multiple critical vulnerabilities including numerous use-after-free issues, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These vulnerabilities affect various components such as WebGL, Aura, Skia, V8, GPU, Views, and others. The update fixes these issues in Chromium version 151.0.7922.108. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19166 is a use-after-free vulnerability in the Web Authentication component of Google Chrome prior to version 151.0.7922.109. This flaw allows a remote attacker to potentially escape the browser sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating and a CVSS score of 9.6, indicating critical impact on confidentiality, integrity, and availability. The issue affects versions before 151.0.7922.109. Google has published an advisory with a stable channel update addressing this vulnerability.