CVE Catalog
CVE-2026-19160
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.31%
24th percentile - higher than 24% of all known CVEs
Summary
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
Potential leakage of sensitive data across different origins, compromising user privacy and session security.
Recommendation
Update Google Chrome to version 151.0.7922.109 or later to fix this vulnerability.
Original NVD description (English source)
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)