Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Metrics
Affected Vendors & Products
References
History
Fri, 29 May 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-200 |
Fri, 29 May 2026 12:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Skia memory disclosure in Chrome via crafted HTML page | chromium-browser: Inappropriate implementation in Skia |
| Weaknesses | CWE-825 | |
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Fri, 29 May 2026 01:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google chrome |
|
| Vendors & Products |
Google
Google chrome |
Fri, 29 May 2026 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Skia memory disclosure in Chrome via crafted HTML page | |
| Weaknesses | CWE-200 |
Thu, 28 May 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) | |
| References |
|
Status: PUBLISHED
Assigner: Chrome
Published: 2026-05-28T22:25:44.397Z
Updated: 2026-05-28T22:25:44.397Z
Reserved: 2026-05-28T17:25:07.037Z
Link: CVE-2026-9981
No data.
Status : Awaiting Analysis
Published: 2026-05-28T23:16:56.333
Modified: 2026-05-29T02:35:42.620
Link: CVE-2026-9981