HIGH
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia
Published Jun 4, 2026
7.4
HIGHCVSS 3.1
EPSS 0.32%
Description
Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Affected products
-
Affected
- ≥ 149.0.7827.53, < 149.0.7827.53
No data.
Red Hat Enterprise Linux 6
webkitgtk
Out of support scope
Red Hat Enterprise Linux 7
webkitgtk3
Affected
Red Hat Enterprise Linux 7
webkitgtk4
Affected
Red Hat Enterprise Linux 8
webkit2gtk3
Affected
Red Hat Enterprise Linux 9
webkit2gtk3
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | webkitgtk | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | webkitgtk3 | Affected | n/a |
| Red Hat Enterprise Linux 7 | webkitgtk4 | Affected | n/a |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | Affected | n/a |
| Red Hat Enterprise Linux 9 | webkit2gtk3 | Affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.
Weaknesses (1)
References (7)
- https://access.redhat.com/security/cve/CVE-2026-10985 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484949 Issue Tracking
- https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html Release Notes
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34434 Advisory
- https://issues.chromium.org/issues/514082801 Permissions Required
- https://nvd.nist.gov/vuln/detail/CVE-2026-10985
- https://www.cve.org/CVERecord?id=CVE-2026-10985
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-10985 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2484949 | Issue Tracking | |
| https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html | Release Notes | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34434 | Advisory | |
| https://issues.chromium.org/issues/514082801 | Permissions Required | |
| https://nvd.nist.gov/vuln/detail/CVE-2026-10985 | ||
| https://www.cve.org/CVERecord?id=CVE-2026-10985 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Chrome
Published Jun 4, 2026
Updated Jun 5, 2026
Reserved Jun 4, 2026
Link CVE-2026-10985
CISA Vulnrichment
Updated Jun 5, 2026
GitHub
No data