Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-19167

Опубликовано: 06 авг. 2026
Источник: redhat
CVSS3: 6.8

Описание

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

A flaw was found in Google Chrome. An integer overflow vulnerability in the Graphics Processing Unit (GPU) component could allow a remote attacker, who has already compromised the renderer process, to leak sensitive cross-origin data. This exploitation is possible by enticing a user to visit a specially crafted HTML page.

Отчет

This Moderate impact vulnerability in the Chromium browser's GPU component could allow a remote attacker, after successfully compromising the renderer process, to exploit an integer overflow and leak sensitive cross-origin data. This risk is primarily relevant to users who process untrusted web content.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=2512351chromium-browser: Google Chrome: Cross-origin data leakage via integer overflow in GPU

6.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.1
ubuntu
10 дней назад

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVSS3: 3.1
nvd
10 дней назад

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

msrc
5 дней назад

CVE-2026-19167 Integer overflow in GPU

CVSS3: 3.1
debian
10 дней назад

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allow ...

CVSS3: 3.1
github
10 дней назад

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

6.8 Medium

CVSS3