Exploitation ongoing with high activity in latest observed window (3 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
| Date | Total | Labels |
|---|
| 2026-04-23 | 1 | General1 |
| 2026-04-24 | 1 | General1 |
| 2026-04-26 | 1 | General1 |
| 2026-04-30 | 2 | Disclosure1Patch1 |
| 2026-05-01 | 1 | General1 |
| 2026-05-14 | 1 | Disclosure1 |
| 2026-05-21 | 3 | Active Exploitation1Patch2 |
Vulnerabilidades CVE-2026-6919 y CVE-2026-6920 afectan a componentes internos del motor del navegador Google Chrome. Se recomienda actualizar a la versión 147.0.7727.117 o superior. https://hubs.la/Q04dK0bR0
Post summary
The advisory announces new CVEs affecting Chrome’s internal engine components and recommends updating to at least version 147.0.7727.117 to mitigate the risk.
Chrome DevTools Sandbox Escape (CVE-2026-6919): 3.5B Users Face Active Exploitation Risk Google's Chrome team issued a security update on April 24-25, 2026, addressing 19 internal security defects, three of which were assigned CVE identifiers.
Post summary
Google released a security update on 24‑25 April 2026 to address CVE‑2026‑6919, a DevTools sandbox escape that could affect 3.5 B users; a patch is available, but no evidence of active exploitation is provided.
TL;DR Google patched three browser vulnerabilities in Chrome 147.0.7727.116+, including CVE-2026-6919, a HIGH-severity use-after-free in DevTools that enables sandbox escape via malicious web pages. Exploitation could grant remote code execution. Updates rolling out over…
Post summary
Google announced a patch for CVE-2026-6919, a high-severity use-after-free in Chrome 147.0.7727.116+ that could lead to remote code execution via malicious web pages.
90% · CVE-2026-6919 · 147.0.7727.116 → 147.0.7727.117 Chrome DevTools Sandbox Escape (CVE-2026-6919): 3.5B Users Face Active Exploitation Risk
Post summary
Chrome’s DevTools Sandbox Escape (CVE‑2026‑6919) is actively being exploited across roughly 3.5 B users, and a patch is available in the new 147.0.7727.117 update.
被害防止に役立つクローム脆弱性ポイント、押さえておきたい 【脆弱性情報】 CVE-2026-6919 googleのchromeの脆弱性について https://www.cybernote.click/2026/04/26/%e3%80%90%e8%84%86%e5%bc%b1%e6%80%a7%e6%83%85%e5%a0%b1%e3%80%91-cve-2026-6919-google%e3%81%aechrome%e3%81%ae%e8%84%86%e5%bc%b1%e6%80%a7%e3%81%ab%e3%81%a4%e3%81%84%e3%81%a6/?utm_source=rss&utm_medium=rss&utm_campaign=%25e3%2580%2590%25e8%2584%2586%25e5%25bc%25b1%25e6%2580%25a7%25e6%2583%2585%25e5%25a0%25b1%25e3%2580%2591-cve-2026-6919-google%25e3%2581%25aechrome%25e3%2581%25ae%25e8%2584%2586%25e5%25bc%25b1%25e6%2580%25a7%25e3%2581%25ab%25e3%2581%25a4%25e3%2581%2584%25e3%2581%25a6 #ブログ仲間と繋がりたい #Webライター
Post summary
The post merely references a blog article about CVE‑2026‑6919, with no additional information on exploitation, patches, or technical details.
グーグルクロームの脆弱性を解説。安全に今すぐ対策を確認しよう！ 【脆弱性情報】 CVE-2026-6919 googleのchromeの脆弱性について https://www.cybernote.click/2026/04/26/%e3%80%90%e8%84%86%e5%bc%b1%e6%80%a7%e6%83%85%e5%a0%b1%e3%80%91-cve-2026-6919-google%e3%81%aechrome%e3%81%ae%e8%84%86%e5%bc%b1%e6%80%a7%e3%81%ab%e3%81%a4%e3%81%84%e3%81%a6/?utm_source=rss&utm_medium=rss&utm_campaign=%25e3%2580%2590%25e8%2584%2586%25e5%25bc%25b1%25e6%2580%25a7%25e6%2583%2585%25e5%25a0%25b1%25e3%2580%2591-cve-2026-6919-google%25e3%2581%25aechrome%25e3%2581%25ae%25e8%2584%2586%25e5%25bc%25b1%25e6%2580%25a7%25e3%2581%25ab%25e3%2581%25a4%25e3%2581%2584%25e3%2581%25a6 #ブログ仲間と繋がりたい #Webライター
Post summary
The text announces a new Chrome vulnerability (CVE‑2026‑6919) and directs readers to a link for more information.
CVE-2026-6919 | Chromium: CVE-2026-6919 Use after free in DevTools | Rahsi Framework™ https://www.aakashrahsi.online/post/cve-2026-6919 https://t.co/Ja8l91aYEN
Post summary
An announcement of CVE-2026-6919, a use‑after‑free vulnerability in Chromium's DevTools, with no evidence of active exploitation or mitigation details provided.
【 #脆弱性情報】 CVE-2026-6919 #google の #chrome の脆弱性について https://www.cybernote.click/2026/04/26/%e3%80%90%e8%84%86%e5%bc%b1%e6%80%a7%e6%83%85%e5%a0%b1%e3%80%91-cve-2026-6919-google%e3%81%aechrome%e3%81%ae%e8%84%86%e5%bc%b1%e6%80%a7%e3%81%ab%e3%81%a4%e3%81%84%e3%81%a6/
Post summary
The tweet only references a Google Chrome vulnerability (CVE-2026-6919) and links to an external source without providing additional details.
CVE番号が付番されたのは以下の3件 CVE-2026-6919:High(深刻度) CVE-2026-6920:High CVE-2026-6921:Medium
Post summary
The text merely lists three CVE identifiers with their severity ratings, without providing additional context or technical information.
There is a new vulnerability with elevated criticality in Google Chrome (CVE-2026-6919) https://vuldb.com/vuln/359166
Post summary
The post merely announces the existence of CVE‑2026‑6919 with high criticality, without providing evidence of PoC, exploits, or mitigation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - | |
| App | chrome | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |