CVE-2026-91740

A flaw was found in Skia, a 2D graphics library used in Google Chrome. This vulnerability, stemming from an uninitialized resource, allows a remote attacker to obtain sensitive cross-origin data. By crafting a malicious HTML page, an attacker can trick a user into visiting it, leading to the...

CVE-2026-91733

A flaw was found in Skia, a 2D graphics library used in chromium-browser. This improper state validation vulnerability allows a remote attacker, who has already compromised the renderer process, to read memory outside of the security sandbox. This can be achieved by enticing a user to open a...

CVE-2026-91747

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could allow the attacker to obtain sensitive cross-origin data...

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91733

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91740

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79975

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-91740

CVE-2026-91740 is an uninitialized resource flaw in Skia , the 2D graphics library used in Google Chrome . A remote attacker could exploit it via a crafted HTML page to obtain cross-origin data , leaking information from other web origins. The vulnerability affects Chrome versions prior to 153.0....

CVE-2026-91733

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91747

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79967

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-79968

Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-91733

CVE-2026-91733 is an improper state validation flaw in Skia , the 2D graphics library used in Google Chrome prior to 153.0.8010.47 . An attacker who has already compromised the renderer process can leverage a crafted HTML page to read memory outside the sandbox , resulting in information disclosu...

CVE-2026-91747

A use-after-free vulnerability in Skia , the 2D graphics library used by Google Chrome , affects versions prior to 153.0.8010.47 (Windows/Mac) and 153.0.8010.48 (Windows/Mac). The flaw allows a remote attacker who has already compromised the renderer process to obtain cross-origin data by serving...

Chrome-Skia-CVE-2024-8636

修复于 Chrome M128：https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html 复现步骤： 1. 将 chromium.diff 补丁应用到 chromium。 2. 运行 genskpic.py 生成 drawablepicture.skp.hh，然后将生成的文件移动到 src/gpu/commandbuffer/client。 3. 构建并启动浏览器。 4. 打开 index.html 触发 PoC。 5. GPU 进程将崩溃。...

Astra Linux – Vulnerability in Chromium

The use of after-free in Skia in Google Chrome before version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in Skia in Google Chrome prior to version 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Chrome-Skia-CVE-2024-8193

在Chrome M128中已修复：https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html 复现步骤： 1. 将 chromium.diff 补丁应用到 chromium。 2. 运行 genskpic.py 生成 drawablepicture.skp.hh，然后将生成的文件移动到 src/gpu/commandbuffer/client。 3. 构建并启动浏览器。 4. 打开 index.html 触发 PoC。 5. GPU 进程将会崩溃。...

Chrome-Skia-CVE-2024-8198

已在 Chrome M128 中修复：https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html 复现步骤： 1. 将 chromium.diff 补丁应用到 chromium。 2. 运行 genskpic.py 生成 drawablepicture.skp.hh，然后将生成的文件移动到 src/gpu/commandbuffer/client。 3. 构建并启动浏览器。 4. 打开 index.html 触发 PoC。 5. GPU 进程将会崩溃。...