CVE Catalog
CVE-2026-19157
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.26%
17th percentile - higher than 17% of all known CVEs
Summary
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109. A remote attacker could potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
Critical risk of sandbox escape, potentially leading to full device compromise. The attack requires no user interaction beyond opening a page.
Recommendation
Immediately update Google Chrome on Android to version 151.0.7922.109 or later. Consider enabling automatic updates.
Original NVD description (English source)
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)