PT-2026-33164 · Google · Skia+1

Published 2026-04-13 · Updated 2026-04-18 · CVE-2026-6364

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101

Description An out of bounds read in Skia allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted file. An out of bounds read occurs when a program reads data past the end or before the beginning of the intended buffer.

Recommendations Update Google Chrome to version 147.0.7727.101 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-05515

CVE-2026-6364

OPENSUSE-SU-2026:10572-1

OPENSUSE-SU-2026:20588-1

Affected Products

Google Chrome

Skia

References · 50

• https://osv.dev/vulnerability/openSUSE-SU-2026:10572-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-6364 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05515 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-6364 · Security Note
• https://ubuntu.com/security/CVE-2026-6364 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-6364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6364 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-6364 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6364 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20588-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-6359 · Note
• https://suse.com/security/cve/CVE-2026-6358 · Note
• https://suse.com/security/cve/CVE-2026-6364 · Note
• https://suse.com/security/cve/CVE-2026-6300 · Note