CVE-2026-19168: Google Chrome Inappropriate Implementation in V8

V8 is Chrome's JavaScript engine. A logic flaw in how it implements one of its features lets JavaScript reach a state the engine's safety checks do not expect.

A crafted HTML page exploits that state and runs code inside the renderer sandbox on every platform Chrome ships on. Chromium rates it High; NVD scores it 8.8. Fixed in Chrome 151.0.7922.109 on 6 August 2026.