Threats tagged 'ghsa-c3jf-fpgm-j5mm'

An out-of-bounds read vulnerability exists in the Skia component of Google Chrome versions prior to 148.0.7778.96. This flaw allows a remote attacker who has already compromised the renderer process to leak cross-origin data by using a specially crafted Chrome Extension. The vulnerability has a low CVSS score of 3.1 and is classified as medium severity by Chromium security. No public exploits or known active exploitation have been reported.