Skip to content

CVE record · 2 sources

CVE-2026-126898

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

Vendor: Google
Product: Chrome
Weakness: CWE-908
Exposure class: Browser

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

Chrome release Chrome Releases 6h ago

Stable Channel Update for Desktop

The Stable channel has been updated to 157.0.8103.78/.79 for Windows and Mac and 157.0.8103.78 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log . Security Fixes…

CVE-2026-126885 CVE-2026-126895 CVE-2026-126879+57 more Google
26

CVE NVD 3h ago

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-126898 Google