CVE Catalog
CVE-2026-19149
CriticalCVSS 9.6Summary
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109. A remote attacker could potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
Critical risk of sandbox escape on Linux, potentially leading to full system compromise. The attack requires no user interaction beyond opening a page.
Recommendation
Immediately update Google Chrome on Linux to version 151.0.7922.109 or later. Consider additional isolation mechanisms.
Original NVD description (English source)
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)