Out of Bounds Read in Google Chrome Skia Component

CVE-2026-126894

What is CVE-2026-126894?

A vulnerability in the Skia component of Google Chrome allows for an out-of-bounds read, potentially enabling a remote attacker who has compromised the renderer process to leak sensitive cross-origin data. This flaw can be exploited through specially crafted HTML pages, which may present a significant risk of data exposure. Users are advised to update their browsers to mitigate this risk.

References