REDHAT-BUG-2524104: Medium severity Google Google Chrome vulnerability

Q: What must an attacker do to exploit this issue?

The attacker must persuade a user to load a crafted HTML page in an affected Google Chrome version. Successful exploitation can expose cross-origin data to the remote attacker.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 152.0.7977.65 are affected. Systems running that version or a later version are not identified as affected by the provided information.

Q: What should organizations prioritize when remediation is not yet complete?

Prioritize preventing users from visiting untrusted or attacker-controlled web pages until affected Chrome installations can be updated. The provided information does not describe a separate configuration-based mitigation.

Published Aug 25, 2026

Updated

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Google Chrome<152.0.7977.65

Event History

Aug 25, 2026

Data Sourced

via Red Hat·09:14 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What must an attacker do to exploit this issue?

The attacker must persuade a user to load a crafted HTML page in an affected Google Chrome version. Successful exploitation can expose cross-origin data to the remote attacker.

Which Chrome versions are affected?

Google Chrome versions prior to 152.0.7977.65 are affected. Systems running that version or a later version are not identified as affected by the provided information.

What should organizations prioritize when remediation is not yet complete?

Prioritize preventing users from visiting untrusted or attacker-controlled web pages until affected Chrome installations can be updated. The provided information does not describe a separate configuration-based mitigation.

REDHAT-BUG-2524104: Medium severity Google Google Chrome vulnerability

Affected Software

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which Chrome versions are affected?

What should organizations prioritize when remediation is not yet complete?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which Chrome versions are affected?

What should organizations prioritize when remediation is not yet complete?