Skia
No CISA KEV deadline is open. CISA last added a Skia CVE on 13 Mar.
Tracked since 13 Mar · latest article Wed 9 Sep · RSS
Exploited, by due date
CSV downloadDeadlines passed
12 articles from 4 outlets since 13 Mar; the latest 47 days ago.
- Article
- First report
- Official notice
Show as table
Who reported 4 outlets, last 12 months
- Security Affairs5
- The Hacker News4
- CISA2
- SecurityWeek1
- Google Patches Chrome’s Seventh Zero Day of 2026 Under AttackSecurity Affairs
- Chrome Patches Exploited V8 Zero Day Allowing Code ExecutionThe Hacker News
- CISA Flags Actively Exploited Chrome Flaw as Sixth 2026 Zero-DaySecurity Affairs
- Google Patches Actively Exploited Chrome V8 Zero DaySecurity Affairs
- Google Patches Chrome Zero Day Exploited in V8 AttacksThe Hacker News
- ⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & MoreThe Hacker News
- U.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
- CISA Adds CVE-2026-3909 to Known Exploited Vulnerabilities CatalogueCISA · official notice
- CISA Adds CVE-2026-3909 to Known Exploited Vulnerabilities CatalogueCISA · official notice
- Google fixed two new actively exploited flaws in the Chrome browserSecurity Affairs
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.