Executive brief
Google Chrome's Skia graphics rendering engine contained a use-after-free vulnerability that could allow attackers to execute arbitrary code within Chrome's security sandbox. An attacker could exploit this by hosting a malicious HTML page; if a user visited the page, the attacker could gain code execution with the privileges of the Chrome process and potentially access sensitive data or compromise the user's system.
Technical details
A use-after-free vulnerability exists in Skia, Chrome's graphics library, where memory is accessed after it has been freed. The vulnerability is triggered via a crafted HTML page sent over the network, requiring only that a user visit the malicious page—no authentication or user interaction beyond normal browsing is needed. An attacker can achieve arbitrary code execution within Chrome's sandbox; however, the sandbox constrains the impact to the Chrome process itself. The vulnerability was fixed in Chrome 152.0.7977.82 and later versions, and was not known to be exploited in the wild at the time of disclosure.
Affected products
- Google Chrome prior to 152.0.7977.82
Timeline
- 2026-09-03: disclosed
- 2026-09-03: patched: Chrome 152.0.7977.82 and later