{"id":"CVE-2026-126915","kind":"vulnerability","aliases":["CVE-2026-126915"],"related":[],"title":"Chrome on Android: uninitialized Skia variable lets crafted pages escape sandbox","description":"Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"Google Chrome on Android before 157.0.8103.78 has an uninitialized variable in the Skia graphics library. An attacker who has already compromised the renderer process via a crafted HTML page could potentially run arbitrary code outside the browser sandbox.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","browser","chrome","other"],"not_affected_if":["chrome-up-to-date"],"how_to_check":"- Open Chrome on Android and check the version under Settings > About Chrome; it should be `157.0.8103.78` or later.","fix":"- Google Chrome on Android: `157.0.8103.78`","status":"open","published_at":"2026-11-11T23:17:21+00:00","first_seen_at":"2026-11-11T23:29:40+00:00","triaged_at":"2026-11-11T23:31:31+00:00","updated_at":"2026-11-11T23:31:31+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-11-11T23:31:31Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome on Android: `157.0.8103.78`","reach":"internet","title":"Chrome on Android: uninitialized Skia variable lets crafted pages escape sandbox","impact":"high","summary":"Google Chrome on Android before 157.0.8103.78 has an uninitialized variable in the Skia graphics library. An attacker who has already compromised the renderer process via a crafted HTML page could potentially run arbitrary code outside the browser sandbox.","audience":"everyone","category":"other","nicknames":[],"who_cares":["chrome","android","browser"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs code outside the browser sandbox on the device.","analyst_note":"","how_to_check":"- Open Chrome on Android and check the version under Settings > About Chrome; it should be `157.0.8103.78` or later.\n- unknown","plain_action":"Update Chrome on your Android phone to version 157.0.8103.78 or later through the Play Store.","product_name":"","needs_analyst":false,"not_affected_if":["chrome-up-to-date"],"who_is_affected":"Anyone running Google Chrome on Android before 157.0.8103.78 is exposed when they browse untrusted pages. Desktop Chrome and other browsers are not named in the sources. unknown for further scope.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000714,"input_tokens":4550,"output_tokens":518,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-126915':14A,17A '-2026':13A,16A '157.0.8103.78':26B,73C 'allow':74C 'alreadi':40B 'android':3A,18B,24B,70C 'arbitrari':53B,87C 'attack':37B,77C 'browser':19B,57B 'chrome':1A,20B,22B,67C 'chromium':97C 'code':54B,88C 'compromis':41B,80C 'could':50B 'craft':8A,47B,94C 'cve':12A,15A 'escap':10A 'execut':86C 'googl':21B,66C 'graphic':34B 'high':100C 'html':48B,95C 'let':7A 'librari':35B 'outsid':55B,89C 'page':9A,49B,96C 'potenti':51B,85C 'prior':71C 'process':44B,83C 'remot':76C 'render':43B,82C 'run':52B 'sandbox':11A,58B,91C 'secur':98C 'sever':99C 'skia':5A,33B,64C 'uniniti':4A,29B,61C 'use':59C 'variabl':6A,30B,62C 'via':45B,92C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome on Android before 157.0.8103.78 is exposed when they browse untrusted pages. Desktop Chrome and other browsers are not named in the sources. unknown for further scope.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Chrome on your Android phone to version 157.0.8103.78 or later through the Play Store.","pkeys":[],"ptokens":[],"labels":["android","browser","chrome","high","other"],"campaign_type":null,"search_a":"'-126915':14A,17A '-2026':13A,16A 'android':3A 'chrome':1A 'craft':8A 'cve':12A,15A 'escap':10A 'let':7A 'page':9A 'sandbox':11A 'skia':5A 'uniniti':4A 'variabl':6A","search_b":"'157.0.8103.78':26B 'alreadi':40B 'android':18B,24B 'arbitrari':53B 'attack':37B 'browser':19B,57B 'chrome':20B,22B 'code':54B 'compromis':41B 'could':50B 'craft':47B 'googl':21B 'graphic':34B 'html':48B 'librari':35B 'outsid':55B 'page':49B 'potenti':51B 'process':44B 'render':43B 'run':52B 'sandbox':58B 'skia':33B 'uniniti':29B 'variabl':30B 'via':45B","search_c":"'157.0.8103.78':73C 'allow':74C 'android':70C 'arbitrari':87C 'attack':77C 'chrome':67C 'chromium':97C 'code':88C 'compromis':80C 'craft':94C 'execut':86C 'googl':66C 'high':100C 'html':95C 'outsid':89C 'page':96C 'potenti':85C 'prior':71C 'process':83C 'remot':76C 'render':82C 'sandbox':91C 'secur':98C 'sever':99C 'skia':64C 'uniniti':61C 'use':59C 'variabl':62C 'via':92C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T23:17:21+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-126915","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126915","severity":null,"published_at":"2026-11-11T23:17:21+00:00","modified_at":"2026-11-11T23:17:21+00:00","first_seen_at":"2026-11-11T23:29:40+00:00","fetched_at":"2026-11-11T23:29:40+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}