VYPR
Unrated severityNVD Advisory· Published Jul 1, 2026

Debian chromium: Insufficient validation of untrusted input in Skia in Google Chrome prior to 150…

CVE-2026-13781

Description

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Affected products

2

Patches

Vulnerability mechanics

News mentions

1
CVE-2026-13781 · VYPR