CVE Catalog
CVE-2026-19560
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.42%
35th percentile - higher than 35% of all known CVEs
Summary
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
A remote attacker could exploit this to execute code within the browser sandbox, potentially leading to data compromise or further escalation.
Recommendation
Update Google Chrome to version 151.0.7922.137 or later to fix this vulnerability.
Original NVD description (English source)
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)