CVE Catalog
CVE-2026-11675
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.20%
10th percentile - higher than 10% of all known CVEs
Summary
Google Chrome prior to version 149.0.7827.103 has an out-of-bounds read vulnerability in Skia, allowing a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. Severity: High.
Risk Assessment
An attacker can steal data from other origins displayed in the victim's browser, bypassing the same-origin policy.
Recommendation
Immediately update Google Chrome to version 149.0.7827.103 or later.
Original NVD description (English source)
Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)