CVE-2026-19558

Summary

Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)

Affected Software

VendorProductVersion RangeStatus
GoogleChrome151.0.7922.137 < 151.0.7922.137affected

Weaknesses

  • CWE-416: Use after free

References