Use after free vulnerability in Google Chrome Payments module
CVE-2026-19175

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 August 2026

What is CVE-2026-19175?

A use after free vulnerability in the payments module of Google Chrome prior to version 151.0.7922.109 enables remote attackers to potentially execute a sandbox escape through specially crafted HTML pages. This flaw allows attackers to manipulate memory allocations, leading to arbitrary code execution in the context of the user’s browser.

Affected Version(s)

Chrome 151.0.7922.109

References

https://chromereleases.googleblog.com/2026/08/stable-chan...
https://issues.chromium.org/issues/540138836

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.