Use After Free Vulnerability in Google Chrome on Linux
CVE-2026-19147

8.3HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 August 2026

What is CVE-2026-19147?

A use after free vulnerability has been identified in the Aura component of Google Chrome on Linux. This issue occurs prior to version 151.0.7922.109 and potentially allows a remote attacker, by compromising the renderer process, to exploit this flaw via a specially crafted HTML page. Successful exploitation could enable the attacker to escape the browser's sandbox, leading to significant security implications. It is crucial for users to update their software to the latest version to mitigate this risk.

Affected Version(s)

Chrome 151.0.7922.109

References

https://chromereleases.googleblog.com/2026/08/stable-chan...
https://issues.chromium.org/issues/524439798

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.