EUVD-2026-79968
GHSA-pfh7-rj4p-69qv
Severity by source
AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Primary rating from Vendor (google) · only source for this CVE.
CVSS VectorVendor: google
Lifecycle Timeline
4DescriptionCVE.org
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
AnalysisAI
Improper state validation in the Skia graphics library, as shipped in Google Chrome prior to 153.0.8010.47, lets an attacker who already controls a compromised renderer process read memory outside the browser sandbox by serving a crafted HTML page. Exploitation requires the victim to load the malicious page (UI:R) and depends on chaining with a separate renderer compromise, which is why the vector carries AC:H despite the network attack path. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today