Threats tagged 'ghsa-h2gx-2wp9-ghcx'

CVE-2026-93387 is a medium severity vulnerability in Google Chrome prior to version 153.0.8010.52 involving improper state validation in the Skia component. This flaw could allow a remote attacker to obtain cross-origin data by tricking a user into visiting a crafted HTML page. The vulnerability does not allow integrity or availability impacts, but it compromises confidentiality to a limited extent. Google has released a stable channel update to address this issue.