CVE-2026-19173 Out of bounds write in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-19173

Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19173

Google Chrome versions prior to 151.0.7922.109 are vulnerable to an out-of-bounds write in the Skia component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to potentially perform a sandbox escape . This vulnerability is categorized with high secur...