CVE Catalog
CVE-2026-16417
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.18%
7th percentile - higher than 7% of all known CVEs
Summary
Google Chrome prior to version 150.0.7871.182 has an uninitialized use vulnerability in Skia. A remote attacker who compromised the renderer process can leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk involves potential cross-origin data leakage, which could lead to disclosure of sensitive user information.
Recommendation
Update Google Chrome to version 150.0.7871.182 or later.
Original NVD description (English source)
Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)