Out of Bounds Read in Skia of Google Chrome

CVE-2026-126884

What is CVE-2026-126884?

The vulnerability in Skia, a graphics library used by Google Chrome, allows remote attackers to exploit an out of bounds read. By crafting a malicious HTML page, an attacker can gain access to memory locations outside the application's permitted sandbox, potentially revealing sensitive information or enabling further attacks. It is crucial for users to update their Google Chrome installations to the latest version to mitigate this vulnerability.

References