PT-2026-93158 · Google+1 · Skia+2

CVE-2026-91740

·

Published

2026-09-15

·

Updated

2026-09-21

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47
Description An uninitialized resource in Skia allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Skia is a 2D graphics library used for rendering text and images.
Recommendations Update Google Chrome to version 153.0.8010.47 or later.

Fix

DoS

Use of Uninitialized Resource

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-908

Related Identifiers

ALSA-2026:69098
CVE-2026-91740
ECHO-37C5-74EA-5E87
OPENSUSE-SU-2026:11812-1
OPENSUSE-SU-2026:21913-1

Affected Products

Google Chrome
Rocky Linux
Skia