CVE-2026-19156 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 6.69%

Affected Products (NVD)

Vendor	Product	Version
google	chrome	𝑥 < 151.0.7922.109

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

chromium

bookworm	vulnerable
bookworm (security)	vulnerable
bullseye	vulnerable
bullseye (security)	vulnerable
forky	vulnerable
sid	vulnerable
trixie	vulnerable
trixie (security)	vulnerable

Ubuntu Releases

Ubuntu Product

Codename

chromium-browser

jammy	not-affected
noble	not-affected
resolute	not-affected

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Vulnerability Media Exposure

References

https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html

https://issues.chromium.org/issues/533331920