Insufficient Input Validation in Google Chrome Affects Web Security
CVE-2026-19153

8.1HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 August 2026

What is CVE-2026-19153?

A vulnerability in Google Chrome allows a remote attacker with access to the compromised renderer process to bypass the site's isolation protections. This occurs due to insufficient validation of untrusted input in Workers, potentially leading to unauthorized access and manipulation of user data through carefully crafted HTML pages. Users are advised to update to the latest version of Google Chrome to mitigate risks associated with this vulnerability.

Affected Version(s)

Chrome 151.0.7922.109

References

https://chromereleases.googleblog.com/2026/08/stable-chan...
https://issues.chromium.org/issues/532939327

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.