Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. (Chromium security severity: Medium)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-15 | 2 | Disclosure2 |
| 2026-04-16 | 1 | Disclosure1 |
(CVE-2026-6364)[502103414][Skia][skip]OOBR https://skia-review.googlesource.com/c/skia/+/1208956 🤔Reported by Google Threat Intelligence
Post summary
A new CVE‑2026‑6364 vulnerability in Skia, described as an out‑of‑bounds read, has been disclosed with an associated code review link, but no exploit or mitigation details are provided.
CVE-2026-6364 Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a craf… https://www.cve.org/CVERecord?id=CVE-2026-6364
Post summary
CVE-2026-6364 is an out‑of‑bounds read vulnerability in Skia affecting Chrome versions before 147.0.7727.101, potentially leaking process memory. No PoC, exploit, or patch information is currently disclosed.
CVE-2026-6364 Out of Bounds Read in Skia in Google Chrome Prior to 147.0.7727.101 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6364
Post summary
CVE-2026-6364 is an Out‑of‑Bounds Read vulnerability in Skia affecting Google Chrome versions earlier than 147.0.7727.101, with no PoC, exploit code, or active exploitation mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |