GHSA-hcpg-4fq9-rx36HighCVSS 7.5

Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78...

Published
November 12, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (1)

📋 Description

Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 References (4)