REDHAT-BUG-2523847: Low severity Google Google Chrome vulnerability

Q: What access does an attacker need before this issue can be exploited?

The attacker must already have compromised the Chrome renderer process. The crafted HTML page is then used to trigger an out-of-bounds read and access memory within the sandbox.

Q: What data could be exposed if the issue is exploited?

A successful exploit may allow reading memory inside Chrome's sandbox. The provided information does not indicate exposure outside the sandbox or code execution.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 152.0.7977.65 are affected.

Published Aug 25, 2026

Updated

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Affected Software

1 affected component

Google Google Chrome<152.0.7977.65

Event History

Aug 25, 2026

Data Sourced

via Red Hat·08:44 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What access does an attacker need before this issue can be exploited?

The attacker must already have compromised the Chrome renderer process. The crafted HTML page is then used to trigger an out-of-bounds read and access memory within the sandbox.

What data could be exposed if the issue is exploited?

A successful exploit may allow reading memory inside Chrome's sandbox. The provided information does not indicate exposure outside the sandbox or code execution.

Which Chrome versions are affected?

Google Chrome versions prior to 152.0.7977.65 are affected.

REDHAT-BUG-2523847: Low severity Google Google Chrome vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need before this issue can be exploited?

What data could be exposed if the issue is exploited?

Which Chrome versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need before this issue can be exploited?

What data could be exposed if the issue is exploited?

Which Chrome versions are affected?