{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5870", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-04-08T19:34:34.701Z", "datePublished": "2026-04-08T21:20:44.311Z", "dateUpdated": "2026-04-10T03:55:50.570Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "147.0.7727.55", "status": "affected", "lessThan": "147.0.7727.55", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Integer overflow", "cweId": "CWE-472"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-04-08T21:20:44.311Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html"}, {"url": "https://issues.chromium.org/issues/495534710"}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-09T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-5870"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-10T03:55:50.570Z"}}]}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"}], "id": "CVE-2026-5870", "lastModified": "2026-04-08T22:16:26.580", "metrics": {}, "published": "2026-04-08T22:16:26.580", "references": [{"source": "chrome-cve-admin@google.com", "url": "https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html"}, {"source": "chrome-cve-admin@google.com", "url": "https://issues.chromium.org/issues/495534710"}], "sourceIdentifier": "chrome-cve-admin@google.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-472"}], "source": "chrome-cve-admin@google.com", "type": "Primary"}]}

{"bugzilla": {"description": "chromium-browser: Integer overflow in Skia", "id": "2456802", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456802"}, "csaw": false, "cvss3": {"cvss3_base_score": "9.6", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-190", "details": ["Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "An integer overflow flaw was found in the Skia component of the Chromium browser.\nUpstream bug(s):\nhttps://code.google.com/p/chromium/issues/detail?id=495534710"], "name": "CVE-2026-5870", "public_date": "2026-04-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-5870\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5870\nhttps://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html\nhttps://issues.chromium.org/issues/495534710"], "statement": "Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[147.0.7727.55,147.0.7727.55)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Chrome", "source": "cna", "vendor": "Google"}, "product": "chrome", "vendor": "google"}], "analysis": {"en": {"generated_at": "2026-04-09T00:05:49.607668+00:00", "value": {"mitigation_remediation": ["Upgrade Google Chrome to version 147.0.7727.55 or newer, which contains a patch for the Skia overflow.", "Verify that automatic updates are enabled so that future security patches are applied automatically."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "All users running a Chrome stable channel version earlier than 147.0.7727.55 are affected. The vulnerability is present in every build before that revision, regardless of operating system. Updating to any Chrome release equal to or newer than 147.0.7727.55 removes the flaw.", "description_and_impact": "An integer overflow in the Skia graphics engine of Google Chrome allows a remote attacker to execute arbitrary code while the browser process remains sandboxed. The flaw, classified as CWE\u2011472, is triggered by a specially crafted HTML page served to a user\u2019s browser. Because the malicious payload runs inside the sandbox, an attacker could gain control of the browser process, potentially allowing data exfiltration or manipulation of the user session.", "risk_and_exploitability": "Chromium has labeled the issue as high severity. A remote attacker can trigger the overflow by loading a malicious web page, and the vulnerability has not been listed in CISA\u2019s Known Exploited Vulnerabilities catalog. EPSS information is not available, but the combination of a high severity rating and the ability to launch the attack over the Internet indicates a significant risk for unpatched users."}}}}, "created": "2026-04-09T08:17:32.562979+00:00", "title": "Integer Overflow in Skia Enables Remote Code Execution in Chrome", "updated": "2026-04-09T08:26:56.038311+00:00", "vendors": ["google", "google$PRODUCT$chrome"]}