13 August 2026
Reference: CVE-2026-19137
1. What is being reported?
Researchers have discovered a vulnerability in the WebGL feature of Google Chrome on Android. This flaw lets attackers who have already compromised the browser's rendering process escape the browser's security sandbox by tricking it with a specially crafted web page. This could lead to attackers running harmful code on the device.
2. What this means in plain English
If your business uses Android devices with Google Chrome, this vulnerability could allow hackers to take control of those devices through malicious websites. This could lead to data theft, device damage, or further attacks on your network.
3. Could this affect a small business?
Small businesses using Android phones or tablets with Google Chrome versions older than 151.0.7922.109 are at risk. Those not using Chrome on Android or who have updated recently are less likely to be affected.
4. What to do now
- Check the version of Google Chrome installed on all Android devices used in your organisation.
- Update Google Chrome on Android devices to the latest version immediately.
- Avoid visiting unknown or suspicious websites on Android devices until updates are applied.
- Ask your IT provider to confirm that all Android devices are patched against this vulnerability.
5. Ask your IT provider
Can you confirm that all our Android devices have Google Chrome updated to version 151.0.7922.109 or later to protect against the CVE-2026-19137 vulnerability?
6. Bottom line
Keep Google Chrome on Android devices up to date to protect your business from a serious security risk.
Information based on NVD, CISA KEV, and reputable security reporting.