Skia in Google Chrome vulnerabilities
5 known CVE vulnerabilities in Skia in Google Chrome, translated and rated.
- CVE-2026-8510High
Integer overflow in Skia in Google Chrome on Windows prior to version 148.0.7778.168 allows a remote attacker who compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.
- CVE-2026-7923High
An out of bounds write in Skia in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker who compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2017-5097High
Insufficient validation of untrusted input in Skia in Google Chrome prior to version 60.0.3112.78 for Linux allows a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- CVE-2017-5077High
Insufficient validation of untrusted input in Skia in Google Chrome prior to version 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- CVE-2017-5063High
A numeric overflow in Skia in Google Chrome prior to version 58.0.3029.81 for Linux, Windows, and Mac, and prior to version 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

