Critical
9.6
Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote...
CVE-2026-126846
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| GoogleChrome |
< 157.0.8103.78→ 157.0.8103.78 |
157.0.8103.78 |
Fix status by distribution
Records published by each distribution for this CVE. Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2026-126846 libskia, chromium No fixed version in this record
Original description The description as published by the source.
Use after free in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- REDHAT Red Hat
- web chrome-cve-admin@google.com
- web chrome-cve-admin@google.com
- web nvd.nist.gov
- web github.com