CVE-2026-93387 is a vulnerability in Google Chrome's Skia graphics library where improper state validation enables a remote attacker to bypass same-origin policies and access cross-origin data by crafting a malicious HTML page. This flaw affects Chrome versions prior to 153.0.8010.52 and has been assigned a high severity rating by the Chromium security team. The vulnerability was publicly disclosed on September 17, 2026. The vendor has published an advisory indicating a stable channel update addressing this issue.

Successful exploitation allows a remote attacker to obtain data from other origins, violating the browser's same-origin policy and potentially exposing sensitive information across domains. This can lead to privacy breaches and unauthorized data disclosure.

Google has released an official fix in Chrome version 153.0.8010.52. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are required beyond applying the official update.