Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-19556

Опубликовано: 11 авг. 2026
Источник: redhat
CVSS3: 8.8

Описание

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

A flaw was found in chromium-browser. This use-after-free vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to a compromise of the affected system.

Отчет

This is an Important vulnerability in chromium-browser, as a remote attacker can execute arbitrary code within the browser's sandbox by tricking a user into visiting a specially crafted HTML page. This allows for significant system compromise, elevating its severity beyond Moderate.

Дополнительная информация

Статус:

Important
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=2514407chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in V8

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
4 дня назад

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS3: 8.8
nvd
5 дней назад

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

msrc
2 дня назад

Chromium: CVE-2026-19556 Use after free in V8

CVSS3: 8.8
debian
5 дней назад

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed ...

CVSS3: 8.8
github
5 дней назад

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

8.8 High

CVSS3