Use After Free Vulnerability in Google Chrome Extensions
CVE-2026-19165

7.5HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 August 2026

What is CVE-2026-19165?

An issue that occurs in Google Chrome Extensions allows an attacker to exploit a use after free vulnerability. By convincing a user to install a malicious Chrome Extension, the attacker can execute arbitrary code within a sandboxed environment. This exploitation leverages improper management of memory, leading to potential security breaches. Users are advised to keep their browsers updated to the latest versions to mitigate this vulnerability.

Affected Version(s)

Chrome 151.0.7922.109

References

https://chromereleases.googleblog.com/2026/08/stable-chan...
https://issues.chromium.org/issues/536512612

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.