Improper State Validation in Google Chrome Affects Multiple Versions
CVE-2026-93387

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 17 September 2026

What is CVE-2026-93387?

A vulnerability in Google Chrome arises from improper state validation in Skia, which may allow a remote attacker to exploit the issue via a specially crafted HTML page, leading to the exposure of sensitive cross-origin data. Users are advised to update to the latest version to mitigate potential risks associated with this security flaw.

Affected Version(s)

Chrome 153.0.8010.52

References

https://chromereleases.googleblog.com/2026/09/stable-chan...

https://issues.chromium.org/issues/553130676

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 17, 2026
Vulnerability Reserved
Sep 17, 2026

CVE-2026-93387 Data

JSON