CVE-2013-0883: Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS...

Security readout for executives and security teams

This is an old Chrome/Chromium browser vulnerability in Skia that could let a remote attacker crash the browser through an unspecified input path. The public record describes denial of service only, not code execution or data theft. Business urgency is mainly for legacy or frozen systems still running 2013-era Chrome/Chromium builds. Exposure is most likely on unmanaged, embedded, kiosk, lab, or legacy desktop systems running Chrome/Chromium versions older than the fixed 2013 releases. Modern auto-updated browsers are unlikely to remain exposed, but the source bundle does not list all downstream Chromium-based products. Prioritize as a legacy exposure cleanup item unless asset inventory finds vulnerable browsers in business-critical or internet-facing workflows. There is no cited evidence of active exploitation, but outdated browsers compound risk and should not remain in production. Mitigation focus: Update Chrome to the fixed 2013 version or any supported later release.; Update Chromium packages through the operating system vendor channel.; Retire unsupported browser builds that cannot receive security updates..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.