Sandbox Escape Vulnerability in Google Chrome
CVE-2026-19177

8.3HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
6 August 2026

What is CVE-2026-19177?

A vulnerability in Google Chrome arises from insufficient validation of untrusted input within its user interface. This flaw allows a remote attacker who successfully compromises the renderer process to exploit the vulnerability potentially. By utilizing a specially crafted HTML page, the attacker could facilitate a sandbox escape, enabling them to execute malicious code outside the constraints intended by the browser’s security model.

Affected Version(s)

Chrome 151.0.7922.109

References

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.