CVE-2026-19160

lowCVSS 3.1covered by 2 sourcesfirst seen 2026-08-06

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CSIRTS triage

What: Multiple unspecified vulnerabilities exist in Google Chrome.
Who is affected: Chrome users on all platforms running affected versions.
Urgency: Urgency depends on severity and patch availability; no details provided.
Action: Check for and install the latest Chrome update when available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-19160

Get an email if CVE-2026-19160 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (2)

unknownGoogle Chrome Multiple Vulnerabilitieshkcert · 2026-08-07
lowCVE-2026-19160: Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker w…nvd · 2026-08-06

External references

NVD record for CVE-2026-19160

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-19160 status](https://www.csirts.com/badge/CVE-2026-19160)](https://www.csirts.com/cve/CVE-2026-19160)