skia vulnerability

Google Chrome’s June 30, 2026 desktop stable update fixed CVE-2026-13971, a medium-severity Skia memory-initialization flaw affecting Chrome before 150.0.7871.47 that could let an attacker with a compromised renderer read potentially sensitive process memory through a crafted HTML page. The bug...

CVE-2026-11675 is a high-severity Google Chrome vulnerability disclosed in June 2026 that affects Chrome versions before 149.0.7827.103 and stems from an out-of-bounds read in Skia, allowing a renderer-compromising attacker to leak cross-origin data through a crafted HTML page. That description...

The Chromium project assigned CVE‑2026‑3931 to a heap buffer overflow in the Skia 2D graphics library; Google fixed it in the Chrome 146 stable updates (the patch appears as part of Chrome 146.0.7680.71), and Microsoft has recorded the issue in its Security Update Guide so Microsoft Edge...

CISA’s addition of two browser-related flaws to the Known Exploited Vulnerabilities (KEV) Catalog on March 13, 2026 — tracked as CVE‑2026‑3909 (an out‑of‑bounds write in Skia) and CVE‑2026‑3910 (an unspecified but actively exploited flaw in Chromium’s V8 engine) — is a blunt operational signal...

In the ever-evolving world of cybersecurity, new vulnerabilities constantly surface, calling for vigilance and prompt action on behalf of users and administrators alike. One such recent entry in the cybersecurity lexicon is CVE-2024-8636, a heap buffer overflow vulnerability discovered within...