UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-125350

Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Properties

Euvd product
Chrome
First seen
2026-11-10T18:31:49+00:00
Last seen
2026-11-10T18:31:49+00:00
Euvd assigner
Chrome
Retrieved at
2026-11-10T19:34:22+00:00
Exploited euvd since
2026-11-10T00:00:00+00:00
Src batch id
euvd-20261110T193402Z-263c5d
Source url
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-121390
Fetched at
2026-11-10T19:34:02+00:00
Euvd vendor
Google
First seen by Signal
2026-11-10T19:28:56+00:00
Content hash
dc8a01f75537d6d43724bd70f97eb8508bbb7f732828a47961ffb09d4296c603
Published at
2026-11-10T18:17:35.237
Euvd updated
2026-11-10T18:31:49+00:00
Last modified
2026-11-10T18:17:35.327
Euvd epss pct
0
Licence
ENISA legal notice 1.2: reproduction authorised provided the source is acknowledged
Euvd uuid
fce5f0c8-8a73-3d3f-871f-a14b1bf71baa
Nvd fetched at
2026-11-10T19:31:14.655571+00:00
Euvd aliases
CVE-2026-125350, GHSA-rm6p-3338-xx33

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Use After Free

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-125350 — Ninja Signal Threat Intelligence | Ninja Signal