CVE-2026-19151 - chromium-browser: Chromium-browser: Arbitrary code execution via use-after-free in V8

Back Back to CVE browser

HIGH

chromium-browser: Chromium-browser: Arbitrary code execution via use-after-free in V8

Published Aug 6, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.41%

Description

Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected products

Vendor Google Product Chrome Default
n/a
- Version
  151.0.7922.109
  Status
  affected
  Constraints
  <151.0.7922.109

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Google

Chrome

n/a

Version	Status	Constraints
151.0.7922.109	affected	<151.0.7922.109

Remediation

Red Hat statement

Important: This use-after-free flaw in the V8 JavaScript engine of chromium-browser allows a remote attacker to execute arbitrary code by enticing a user to visit a specially crafted HTML page. While execution is initially contained within the browser's sandbox, the potential for further system compromise elevates the risk to Important, as it bypasses typical browser security mechanisms.

Weaknesses (2)

CWE-416

Use After Free

CWE-825

References (7)

https://access.redhat.com/security/cve/CVE-2026-19151
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512336
Issue Tracking
https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html
Release NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-54122
Advisory
https://issues.chromium.org/issues/530663440
Permissions Required
https://nvd.nist.gov/vuln/detail/CVE-2026-19151
https://www.cve.org/CVERecord?id=CVE-2026-19151

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-19151		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2512336		Issue Tracking
https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html		Release NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-54122		Advisory
https://issues.chromium.org/issues/530663440		Permissions Required
https://nvd.nist.gov/vuln/detail/CVE-2026-19151
https://www.cve.org/CVERecord?id=CVE-2026-19151