An out‑of‑bounds read flaw in the Skia graphics library used by Google Chrome allows a remote attacker to read memory outside the browser sandbox through a specially crafted HTML page. The vulnerability is a classic CWE‑125 OOB read and was rated as high severity by Chromium security reviewers, meaning that sensitive data residing in memory could be disclosed if the flaw is triggered.

Google Chrome versions earlier than 157.0.8103.38 are affected. Users running any pre‑157.0.8103.38 stable or beta channel release are at risk until they upgrade to the patched version or newer.

The flaw can be exploited remotely by loading a malicious web page, and the attack vector is inferred to be browser rendering. EPSS data is not available and the vulnerability is not listed in CISA’s KEV catalog, but its high severity and the potential to read arbitrary memory make it a serious threat. If successfully executed, the attacker gains access to confidential information stored in process memory while bypassing the browser’s sandbox containment.