What is the CVSS score of CVE-2026-19557?

CVE-2026-19557 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Google Chrome are affected by CVE-2026-19557?

A privilege escalation vulnerability (CVE-2026-19557, CVSS 8.3) affects Google Chrome for macOS versions prior to 151.0.7922.137.. A patch is available.

How to fix or mitigate CVE-2026-19557?

Within 24 hours, notify all macOS Chrome users in your organization of the available security update and enable auto-update policies to version 151.0.7922.137 or later. Within 7 days, verify that all managed Chrome installations have been updated to the patched version through your device management tools. Within 30 days, conduct a compliance audit to ensure 100% of Chrome for macOS instances are on 151.0.7922.137 or later, and review endpoint detection logs for any suspicious renderer process behavior that could indicate exploitation attempts.

Google Chrome CVE-2026-19557

EUVD-2026-56984 HIGH

Use After Free (CWE-416)

2026-08-11 Chrome

GHSA-h5x6-wpxm-f7wg

Denial Of Service Google Use After Free Memory Corruption

8.3

CVSS 3.1 · Vendor: Chrome

Severity by source

Vendor (Chrome) PRIMARY

8.3 HIGH

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

8.3 HIGH

AC:H reflects the mandatory chained renderer-compromise prerequisite; S:C captures sandbox escape crossing trust boundary; UI:R for required page visit.

3.1 AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SUSE

HIGH

qualitative

Red Hat

8.2 HIGH

qualitative

Primary rating from Vendor (Chrome).

CVSS VectorVendor: Chrome

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 14:23 vuln.today

CVSS changed

Aug 12, 2026 - 14:22 NVD

8.3 (HIGH)

CVE Published

Aug 11, 2026 - 21:23 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 11, 2026 - 21:23 cve.org

HIGH 8.3

DescriptionCVE.org

Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Sandbox escape in Google Chrome on macOS exploits a use-after-free condition in the TabStrip browser component, enabling a renderer-level attacker to break out of Chrome's security sandbox. Affected are all Chrome for Mac versions prior to 151.0.7922.137. Critically, this vulnerability is a second-stage exploit primitive - it requires the renderer process to already be compromised via a separate, chained vulnerability before this UAF can be weaponized for full sandbox escape. No public exploit code or CISA KEV listing has been identified at time of analysis.

Technical ContextAI

CWE-416 (Use After Free) in Chrome's TabStrip component - the UI subsystem responsible for managing browser tabs. A UAF arises when heap memory associated with a tab object is freed but a dangling pointer to it is subsequently dereferenced, enabling controlled writes or reads to freed memory regions. On Mac, Chrome's renderer process operates inside a security sandbox; exploiting this UAF from within the renderer can corrupt browser process memory in ways that subvert sandbox policy enforcement. The CVSS scope change (S:C) directly reflects this cross-boundary impact: exploitation originates inside the sandbox but achieves code execution in the unsandboxed browser process. CPE cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* covers all Chrome versions, with the Mac-specific scope narrowed by the description.

RemediationAI

Update Google Chrome on Mac to version 151.0.7922.137 or later immediately - this is the vendor-confirmed fix per the Chrome Stable Channel advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html. Chrome's auto-update mechanism should deploy this silently on most systems; verify the installed version via chrome://settings/help. For environments where immediate patching is delayed, reducing the attack surface means preventing users from visiting untrusted or external web content, though this is operationally disruptive. Enabling Chrome's Enhanced Safe Browsing can intercept known malicious pages that might serve a renderer-stage exploit, but this is not a compensating control for the UAF itself. There are no known workarounds that neutralize this specific vulnerability without patching.