CVE Catalog
CVE-2026-76041
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.37%
30th percentile - higher than 30% of all known CVEs
Summary
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
An attacker could exploit this vulnerability to bypass origin policy, potentially leading to data theft from other sites or unauthorized access to resources.
Recommendation
Update Google Chrome to version 151.0.7922.169 or later. It is also recommended to enable automatic updates.
Original NVD description (English source)
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)