CVE-2026-19557
Description
A flaw was found in the TabStrip component of Chromium. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to escape the browser's sandbox, leading to further system compromise.
Statement
A use-after-free flaw in the TabStrip component of Chromium-based browsers could allow a remote attacker to escape the browser's sandbox. After an initial compromise of the renderer process, a crafted HTML page could lead to further system compromise. This vulnerability presents a significant security risk for users of affected Red Hat systems.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
