Executive brief
A security vulnerability has been identified in Google Chrome's graphics engine. If a user visits a specially crafted malicious website, an attacker who has already partially compromised the browser's rendering process could bypass security boundaries (the 'sandbox'). This could allow the attacker to gain broader access to the underlying operating system and the user's data.
Technical details
A use-after-free (UAF) vulnerability exists in Skia, the graphics engine used by Google Chrome, prior to version 148.0.7778.216. The flaw is triggered when the browser incorrectly manages memory during the rendering of graphical content. An attacker who has already achieved code execution within the sandboxed renderer process can exploit this memory corruption to perform a sandbox escape. This would allow the attacker to execute arbitrary code with the privileges of the browser application on the host operating system. The vulnerability is reachable via a maliciously crafted HTML page. Google has addressed this issue in the stable channel update for Windows, Mac, and Linux.
Affected products
- Google Chrome Prior to 148.0.7778.216
Timeline
- 2026-05-27: patched: Fixed in Chrome version 148.0.7778.216/217
- 2026-05-28: disclosed: CVE published by NVD