CVE-2026-11099
MediumSummary
A vulnerability was found in the Skia component of the Chromium browser. Technical details are not provided beyond a reference to the upstream bug.
Risk Assessment
The Skia vulnerability could be exploited by a remote attacker to compromise browser security, e.g. via remote code execution or denial of service.
Recommendation
Update the Chromium browser to the latest version containing the fix for this bug.
Other vulnerabilities in Chromium
See all- CVE-2026-11053Medium
A vulnerability was found in the WebRTC component of the Chromium browser. Technical details are not provided beyond a reference to the upstream bug.
- CVE-2026-79223High
Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Severity: Low)
- CVE-2026-14136Medium
Insufficient validation of untrusted input in Chrome for iOS prior to version 150.0.7871.47 allows a remote attacker to perform UI spoofing via a crafted HTML page.
- CVE-2026-13799High
A use-after-free vulnerability in QUIC in Google Chrome prior to 150.0.7871.47 allows a remote attacker to potentially exploit heap corruption via malicious network traffic.
Original NVD description (English source)
A vulnerability flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500414865
Vulnerability data from NVD (NIST) · CISA KEV · EPSS