CVE-2026-19557
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
An attacker who already compromised the renderer process could escape the sandbox, potentially leading to full system compromise.
Recommendation
Update Google Chrome on Mac to version 151.0.7922.137 or later to fix this vulnerability.
Original NVD description (English source)
Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)