CVE-2026-19558
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)
Risk Assessment
An attacker could exploit this to execute code within the browser sandbox, potentially leading to data compromise or further escalation.
Recommendation
Update Google Chrome to version 151.0.7922.137 or later to fix this vulnerability.
Original NVD description (English source)
Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)