- Vendor / Project
- Product
- Chromium Skia
- Date added
- Apr 21, 2023
- Due date
- May 12, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-190
Description
Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.
Required action
Apply updates per vendor instructions.