CVE-2026-125350
HIGH
Actively Exploited
google
chrome
NVDCISA KEV
CVSS Score
8.8
Severity
HIGH
Published
Nov 10, 2026
Vendor
google
This vulnerability is in the CISA Known Exploited Vulnerabilities Catalog. Active exploitation has been observed. Immediate patching is recommended.
Description
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)