Tag

Skia

All articles tagged with #skia

Chrome Gets Urgent Patch for Two In-The-Wild Zero-Days
technology29 days ago

Chrome Gets Urgent Patch for Two In-The-Wild Zero-Days

Google released emergency Chrome updates to fix two high-severity zero-days actively exploited in the wild: CVE-2026-3909 (an out-of-bounds write in Skia) and CVE-2026-3910 (an issue in the V8 engine). Patches rolled out to Windows (146.0.7680.75), macOS (146.0.7680.76), and Linux (146.0.7680.75) in the Stable channel, with automatic updates available. Google says exploits exist in the wild but will keep bug details restricted until most users are updated. These are the second and third Chrome zero-days exploited in 2026; Google previously fixed CVE-2026-2441 in February, and it paid over $17 million to 747 researchers through its VRP in 2025.

"Critical Chrome Vulnerability: Urgent Update Required for Google Chrome Users"
technology2 years ago

"Critical Chrome Vulnerability: Urgent Update Required for Google Chrome Users"

Google Chrome users are urged to update their browsers as a sixth zero-day exploit, CVE-2023-6345, has been discovered. The vulnerability allows a remote attacker to potentially perform a sandbox escape via a malicious file. The update includes seven security fixes, including patches for the zero-day exploit, and is being rolled out gradually over the coming days/weeks. Users can check their Chrome version in Settings > About Chrome and update if necessary.

technology3 years ago

Google Chrome Faces Multiple Security Threats and Vulnerabilities

Google has released an emergency update for Chrome browser to fix a zero-day vulnerability in Skia, the graphics engine of Chrome, which allows a remote attacker to perform a sandbox escape via a crafted HTML page. The vulnerability is severe and has been actively exploited online. Users are advised to update Chrome immediately to ensure their online security. The update is available for Windows and Mac, while it may take some time to roll out to other platforms.

Urgent: Update Your Google Chrome Browser Now to Avoid Zero-Day Exploits
technology3 years ago

Urgent: Update Your Google Chrome Browser Now to Avoid Zero-Day Exploits

Google has released an update to fix a second zero-day vulnerability in Chrome in the past week. The exploit, which affects Skia, an open-source 2D graphics library used in Chrome, is a "high-severity integer overflow" exploit. Users are advised to update their browser to the latest version to stay safe. This is the second zero-day exploit found in Chrome this year, but regular updates can help keep users protected from such vulnerabilities.

Google Chrome Faces Multiple Zero-Day Attacks, Urgent Security Updates Released
browser-securityzero-day3 years ago

Google Chrome Faces Multiple Zero-Day Attacks, Urgent Security Updates Released

Google has released an emergency patch update to address another actively exploited high-severity zero-day flaw in its Chrome web browser. The flaw, tracked as CVE-2023-2136, is described as a case of integer overflow in Skia, an open source 2D graphics library. The tech giant, which also fixed seven other security issues with the latest update, said it's aware of active exploitation of the flaw, but did not disclose additional details to prevent further abuse. Users are recommended to upgrade to version 112.0.5615.137 for Windows, macOS, and Linux to mitigate potential threats.