CVE Catalog
CVE-2026-19161
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.26%
18th percentile - higher than 18% of all known CVEs
Summary
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
Potential leakage of sensitive data across different origins, compromising user privacy and session security.
Recommendation
Update Google Chrome to version 151.0.7922.109 or later to mitigate this vulnerability.
Original NVD description (English source)
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)