Use After Free Vulnerability in Google Chrome on Windows
CVE-2026-19163

8.3HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 August 2026

What is CVE-2026-19163?

A use after free vulnerability has been identified in the Media component of Google Chrome on Windows, specifically affecting versions before 151.0.7922.109. This flaw could be exploited by an attacker who successfully compromises the renderer process, allowing the potential for a sandbox escape through specially crafted HTML content. Users and administrators are advised to update their Chrome browser to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Chrome 151.0.7922.109

References

https://chromereleases.googleblog.com/2026/08/stable-chan...
https://issues.chromium.org/issues/536449742

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.