AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-19143

Google Chrome: local attacker could potentially perform a sandbox escape

Google

CVE-2026-19143 · Published Aug 6, 2026 · updated Aug 8, 2026

High8.6
Fix: upgrade to 151.0.7922.109 or later
Google advisory

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 151.0.7922.109, < 151.0.7922.109151.0.7922.109
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-20

More Google advisories

All Google
Critical 9.6Aug 6Google Chrome: use after freeCVE-2026-19175fixed in 151.0.7922.109High 7.5Aug 6Google Chrome: use after freeCVE-2026-19176fixed in 151.0.7922.109High 8.3Aug 6Google Chrome: improper input validationCVE-2026-19177fixed in 151.0.7922.109Critical 9.6Aug 6Google Chrome: use after freeCVE-2026-19166fixed in 151.0.7922.109Low 3.1Aug 6Google Chrome: integer overflowCVE-2026-19167fixed in 151.0.7922.109High 8.8Aug 6Google Chrome: remote code executionCVE-2026-19168fixed in 151.0.7922.109