PT-2026-68682
CVE-2026-19137
·
Published
2026-08-06
·
Updated
2026-10-28
Description by
CVSS 3.1
8.3
HighMetricsAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome on Android versions prior to 151.0.7922.109
Description
A use after free issue exists in WebGL. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to potentially perform a sandbox escape, allowing code to execute outside the restricted browser environment.
Recommendations
Update Google Chrome on Android to version 151.0.7922.109 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾