Memory Exposure Vulnerability in Google Chrome by Google
CVE-2026-126848

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
11 November 2026

What is CVE-2026-126848?

An uninitialized resource vulnerability in the Skia graphics engine of Google Chrome can be exploited by a remote attacker to read memory contents outside of its intended sandbox environment. This occurs when a specially crafted HTML page is processed by the compromised renderer process, leading to potential exposure of sensitive information.

Affected Version(s)

Chrome 157.0.8103.78

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.