Vulnerability record/PUBLISHED/Published Nov 11, 2026 22:39:02 UTC
CVE-2026-126848
Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityChrome
Last updatedNov 11, 2026 22:39:02 UTC
PublishedNov 11, 2026 22:39:02 UTC
ReservedNov 11, 2026 22:08:03 UTC