Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Weakness
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 149.0.7827.53 (excluding) | |
| Red Hat Enterprise Linux 8 | RedHat | webkit2gtk3-0:2.54.0-1.el8_10 | * |
| Chromium-browser | Ubuntu | upstream | * |