Uninitialized Resource Vulnerability in Google Chrome by Google
CVE-2026-126914

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
11 November 2026

What is CVE-2026-126914?

An uninitialized resource in the Skia graphics library within Google Chrome versions prior to 157.0.8103.78 enables remote attackers to exploit this vulnerability by crafting a malicious HTML page. When users visit the page, the attack could lead to exposure of cross-origin data, posing significant risks to user privacy and security.

Affected Version(s)

Chrome 157.0.8103.78

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.