CVE-2026-19174

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109

Description An integer overflow exists in V8, the open-source JavaScript and WebAssembly engine. This flaw allows a remote attacker to execute arbitrary code within a sandbox by enticing a user to visit a crafted HTML page. The issue enables the corruption of native JIT (Just-In-Time) code space directly, which allows for code execution in the renderer without the V8 sandbox being involved. JIT is a method of improving performance by compiling code during execution rather than before.

Recommendations Update Google Chrome to version 151.0.7922.109 or later.