A flaw was found in chromium-browser. An uninitialized resource in the Graphics Processing Unit (GPU) component can lead to information disclosure by allowing memory to be read from outside the security sandbox. A remote attacker who has already compromised the browser's renderer process could exploit this flaw by enticing a user to view a crafted web page, enabling them to bypass process isolation boundaries and access unauthorized data.
Last checked: 2026-09-30 15:05 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-29 21:07 UTC)
Fix evidence last checked: 2026-10-22 21:20 UTC
Debian 12 (Bookworm)
DLA-4811-1 · Published 2026-10-02
Debian 13 (Trixie)
DSA-6535-1 · Published 2024-12-01