Google Skia Integer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 30/11/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | < 119.0.6045.199 | 119.0.6045.199 |
| edge chromium | < 119.0.2151.97 | 119.0.2151.97 |
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free