cve 2026 7949

  1. CVE-2026-7949 Skia Bug: Why Chrome/Edge Extensions Matter for Cross‑Origin Data Leaks

    Google and Microsoft disclosed CVE-2026-7949 on May 6, 2026, as a medium-severity Chromium flaw in Skia that affects Google Chrome before version 148.0.7778.96 and can let an attacker with renderer compromise leak cross-origin data through a crafted Chrome extension. That is a narrow bug...