EUVD-2026-66036
GHSA-3m33-jrf4-2649
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Renderer pre-compromise drives AC:H; victim must visit crafted page (UI:R); confidentiality impact high but no integrity or availability effect and scope unchanged.
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
AnalysisAI
Skia, the 2D graphics library embedded in Google Chrome prior to 152.0.7977.65, leaks sensitive information when an attacker who has already compromised the renderer process delivers a crafted HTML page to a victim. This CWE-200 flaw functions as a chaining component in a multi-stage exploit rather than a standalone entry point - it amplifies the impact of a prior renderer compromise rather than providing initial access. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the attacker has already achieved renderer process compromise via a separate, unrelated vulnerability - this precondition is explicitly stated in the CVE description and is the defining constraint on realistic risk. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N, score 5.3) reflects an inherent tension: C:H signals significant confidentiality impact, yet AC:H and the explicit precondition of a compromised renderer substantially suppress standalone exploitability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has separately exploited a renderer-level Chrome vulnerability uses that foothold to serve a crafted HTML page processed by the Skia graphics engine. The malformed Skia operations trigger an improper memory read within the compromised renderer's context, leaking sensitive data - potentially cross-origin content, in-memory credentials, or memory layout information useful for bypassing ASLR - which is then exfiltrated to an attacker-controlled server as a stepping stone to further exploitation. |
| Remediation | Upgrade Google Chrome to version 152.0.7977.65 or later, which contains the vendor-released patch per the stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today