CVE-2026-19144 Google CVE debrief

Who should care

Organizations and individuals using Google Chrome prior to version 151.0.7922.109 should be aware of this vulnerability and take immediate action to update their browsers. This vulnerability has the potential to be exploited remotely, making it a high-risk issue for users of affected versions of Google Chrome.

Technical summary

The CVE-2026-19144 vulnerability is a use-after-free issue in the HTML component of Google Chrome. This vulnerability can be exploited by a remote attacker to potentially corrupt heap memory by providing a specially crafted HTML page. The vulnerability has been assigned a high CVSS score of 8.8 and a High severity rating by Chromium. Users of Google Chrome prior to version 151.0.7922.109 are affected by this vulnerability.

Defensive priority

This vulnerability has a high CVSS score of 8.8 and is classified as High severity. It allows a remote attacker to potentially exploit heap corruption via a crafted HTML page, indicating a significant risk to users of Google Chrome prior to version 151.0.7922.109.

Recommended defensive actions

• Apply the official patch: Upgrade Google Chrome to version 151.0.7922.109 or later.
• Inventory and monitor: Ensure all instances of Google Chrome are updated to the latest version.
• Implement compensating controls: Consider implementing additional security measures such as network segmentation or monitoring for suspicious activity.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE-2026-19144 record indicates a use-after-free vulnerability in HTML in Google Chrome prior to 151.0.7922.109. The vulnerability is described as allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. The Chromium security severity is listed as High with a CVSS score of 8.8. Limited information is available about the specific details of the vulnerability and its impact.

Official resources