CVE-2026-103629: High Integer overflow in Skia
Chromium CVE-2026-103629: Integer overflow
Other sources
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
— MITRE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 154.0.4258.62 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 154.0.8037.97 - Upgrade
Upgrade
Microsoft Edge (Chromium-based)to a version that resolves this vulnerability.Fixed in 154.0.8037.97
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-110166
- CVE-2026-113279
- CVE-2026-19175
- CVE-2026-87558
- CVE-2026-87474
- CVE-2026-87581
- CVE-2026-110918
- CVE-2026-110915
- CVE-2026-95318
- CVE-2026-110138
- CVE-2026-91735
- CVE-2026-110148
- CVE-2026-113271
- CVE-2026-113072
- CVE-2026-110154
- CVE-2026-110171
- CVE-2026-110172
- CVE-2026-110922
- CVE-2026-113175
- CVE-2026-91746
- CVE-2026-110136
- CVE-2026-113339
- CVE-2026-110913
- CVE-2026-110151
- CVE-2026-102319
- CVE-2026-91731
- CVE-2026-95324
- CVE-2026-95299
- CVE-2026-110161
- CVE-2026-95286
- CVE-2026-95365
- CVE-2026-103623
- CVE-2026-106383
- CVE-2026-113280
- CVE-2026-110170
- CVE-2026-110141
- CVE-2026-110163
- CVE-2026-110147
- CVE-2026-95343
- CVE-2026-106211
- CVE-2026-106233
- CVE-2026-102308
- CVE-2026-102304
- CVE-2026-102316
- CVE-2026-102324
- CVE-2026-106184
- CVE-2026-106329
- CVE-2026-110162
- CVE-2026-110157
- CVE-2026-110142
- CVE-2026-106421
- CVE-2026-106204
- CVE-2026-106347
- CVE-2026-106200
- CVE-2026-106257
- CVE-2026-106190
- CVE-2026-106318
- CVE-2026-87444
- CVE-2026-110137
- CVE-2026-79122
- CVE-2026-102306
- CVE-2026-103622
- CVE-2026-106423
- CVE-2026-95348
- CVE-2026-106358
- CVE-2026-91715
- CVE-2026-91741
- CVE-2026-91709
- CVE-2026-91711
Frequently Asked Questions
Which Chrome versions are affected?
Google Chrome versions prior to 154.0.8037.97 are affected.
Who could exploit this issue?
A remote attacker could exploit the issue by getting a user to load a crafted HTML page.
What is the potential impact?
Successful exploitation could allow cross-origin data to be leaked.