Information Leak Vulnerability in Google Chrome's Skia Component
CVE-2026-126882

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
11 November 2026

What is CVE-2026-126882?

An information leak vulnerability exists within the Skia graphics library in Google Chrome versions earlier than 157.0.8103.78. This flaw enables a remote attacker to exploit a compromised renderer process, potentially allowing them to extract sensitive cross-origin data through specially crafted HTML pages. Users are advised to update their browsers promptly to mitigate exposure to this risk.

Affected Version(s)

Chrome 157.0.8103.78

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.