Description
Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.
NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.
Scoring
- CVSS: Not yet available
- EPSS exploitation probability: Not yet available
- EPSS percentile: Not yet available
CISA KEV status
- Added to KEV: 2023-11-30
- Remediation due date: 2023-12-21
- Known ransomware campaign use: Unknown
More from Google
- CVE-2026-111497 — Brotli
- CVE-2026-58704 — Pixel
- CVE-2026-87491 — Chromium V8
- CVE-2026-85046 — Chromium V8
- CVE-2026-11645 — Chromium V8