CVE Catalog
CVE-2026-19171
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109. A remote attacker could exploit a crafted HTML page to potentially perform a sandbox escape.
Risk Assessment
Sandbox escape could allow an attacker to execute code outside browser restrictions, posing a serious security threat to the system.
Recommendation
Update Google Chrome to version 151.0.7922.109 or later as soon as possible.
Original NVD description (English source)
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)