Описание
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
A flaw was found in Skia, a 2D graphics library used in Chromium. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into opening a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, leading to information disclosure.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | firefox | Under investigation | ||
| Red Hat Enterprise Linux 6 | webkitgtk | Out of support scope | ||
| Red Hat Enterprise Linux 7 | firefox | Under investigation | ||
| Red Hat Enterprise Linux 7 | webkitgtk3 | Not affected | ||
| Red Hat Enterprise Linux 7 | webkitgtk4 | Affected | ||
| Red Hat Enterprise Linux 8 | firefox | Under investigation | ||
| Red Hat Enterprise Linux 8 | webkit2gtk3 | Affected | ||
| Red Hat Enterprise Linux 9 | firefox | Under investigation | ||
| Red Hat Enterprise Linux 9 | webkit2gtk3 | Fixed | RHSA-2026:69098 | 21.09.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
Связанные уязвимости
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 ...
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
EPSS