AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-19160

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a...

Google

CVE-2026-19160 · Published Aug 6, 2026 · updated Aug 7, 2026

Low3.1
Fix: upgrade to 151.0.7922.109 or later
Google advisory

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 151.0.7922.109, < 151.0.7922.109151.0.7922.109
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-457

More Google advisories

All Google
Critical 9.6Aug 6Google Chrome: use after freeCVE-2026-19175fixed in 151.0.7922.109High 7.5Aug 6Google Chrome: use after freeCVE-2026-19176fixed in 151.0.7922.109High 8.3Aug 6Google Chrome: improper input validationCVE-2026-19177fixed in 151.0.7922.109Critical 9.6Aug 6Google Chrome: use after freeCVE-2026-19166fixed in 151.0.7922.109Low 3.1Aug 6Google Chrome: integer overflowCVE-2026-19167fixed in 151.0.7922.109High 8.8Aug 6Google Chrome: remote code executionCVE-2026-19168fixed in 151.0.7922.109