Advisory severityHigh8.8Red Hat Linux

High [CVE-2026-19559] Arbitrary code execution via use after free in HTML

This high-severity Red Hat Linux advisory covers CVE-2026-19559.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-19559 Source published Aug 11, 2026Source updated Aug 11, 2026

VulniPulse record published Aug 12, 2026Record updated Aug 12, 2026

CVE-2026-19559

Affected products & platforms

Red Hat LinuxUnclassified

Open source advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) This can be exploited by enticing a user to visit a specially crafted HTML page.

This is an Important flaw affecting Chromium-based browsers, such as chromium-browser in Red Hat products. A use-after-free vulnerability in the HTML component allows a remote attacker to achieve arbitrary code execution within the browser's sandbox.

This requires user interaction, typically by visiting a specially crafted web page, but can lead to significant compromise of the affected system. Red Hat severity: Important — CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

Weakness: CWE-416.

Affected versions

< 151.0.7922.137

Official advisory · high-confidence parse· fetched 29 days ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 29 days ago·verify at source

Mitigation

The source record does not include mitigation steps. That is not a statement that no fix exists — read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 29 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.