Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-10941: Google Chrome Memory Access Bug Allows Malicious Code Execution
CVE-2026-10941 · published 5 months ago
Summary
A security bug in Google Chrome's graphics library, Skia, allows a malicious website to run unauthorized code on your computer. This could lead to your personal data being stolen or your computer being taken over. Update Google Chrome to the latest version to fix this issue.
What to do
- Update debian chromium to version 149.0.7827.53-1~deb12u1.
- Update debian chromium to version 149.0.7827.53-1~deb13u1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium |
< 149.0.7827.53-1~deb12u1 Fix: upgrade to 149.0.7827.53-1~deb12u1
|
| Debian:13 | debian | chromium |
< 149.0.7827.53-1~deb13u1 Fix: upgrade to 149.0.7827.53-1~deb13u1
|
| Debian:14 | debian | chromium | All versions |
Original advisory text
Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity...
Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-125Out-of-bounds Read
CWE-787Out-of-bounds Write
Timeline
Published4 Jun 2026
Updated4 Nov 2026
First seen5 Jun 2026
Track software like this
Free during beta