Executive brief
A use-after-free vulnerability exists in the Skia graphics rendering engine within Google Chrome. An attacker who has already compromised the browser's renderer process can exploit this flaw to access sensitive data from other websites, potentially exposing customer information or session details. This requires a two-stage attack: first compromising the renderer, then leveraging this vulnerability to break cross-origin isolation boundaries.
Technical details
This is a use-after-free vulnerability in Skia, the graphics library used by Chrome's rendering engine. The flaw allows an attacker with an existing renderer process compromise to access cross-origin data via a specially crafted HTML page. Use-after-free bugs occur when freed memory is accessed, potentially leading to data disclosure or code execution. The attack vector requires network connectivity to deliver the malicious HTML page, but only affects renderers already compromised by an attacker. A fix is available in Chrome version 153.0.8010.47 and later. Google assessed this as high severity within their own classification system.
Affected products
- Google Chrome prior to 153.0.8010.47
Timeline
- 2026-09-15: disclosed
- 2026-09-15: patched: Fixed in Chrome 153.0.8010.47