skia out of bounds write

  1. Chrome 148 CVE-2026-7923 Skia Sandbox Escape Fix: What Windows IT Must Do

    Google’s Chrome 148 desktop update, released May 5, 2026 for Windows, macOS, and Linux, fixes CVE-2026-7923, a high-severity out-of-bounds write in Skia that could let an attacker who already compromised Chrome’s renderer attempt a sandbox escape through a crafted HTML page. That sentence is dry...