REDHAT-BUG-2512341: Medium severity Google Google Chrome vulnerability

Q: What must an attacker achieve before this issue can be exploited?

The attacker must already have compromised the Chrome renderer process. They can then use a crafted HTML page to trigger the issue.

Q: What is the potential impact after exploitation?

A successful exploit can leak cross-origin data, weakening browser isolation between different web origins.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 151.0.7922.109 are affected. Systems running an earlier version should be updated to a version that includes the fix.

Published Aug 6, 2026

Updated

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Google Chrome<151.0.7922.109

Event History

Aug 6, 2026

Data Sourced

via Red Hat·10:30 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What must an attacker achieve before this issue can be exploited?

The attacker must already have compromised the Chrome renderer process. They can then use a crafted HTML page to trigger the issue.

What is the potential impact after exploitation?

A successful exploit can leak cross-origin data, weakening browser isolation between different web origins.

Which Chrome versions are affected?

Google Chrome versions prior to 151.0.7922.109 are affected. Systems running an earlier version should be updated to a version that includes the fix.

REDHAT-BUG-2512341: Medium severity Google Google Chrome vulnerability

Affected Software

Event History

Frequently Asked Questions

What must an attacker achieve before this issue can be exploited?

What is the potential impact after exploitation?

Which Chrome versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker achieve before this issue can be exploited?

What is the potential impact after exploitation?

Which Chrome versions are affected?