Vulnerability
Published 2026-11-10
Verified 2026-10-24
Google Chromium (CVE-2026-125350)
Google Chromium Use-After-Free Vulnerability. Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Apply vendor mitigations.
Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- Google Chromium
- Exploited in Australia?
- unknown
- Primary: NVD
- Vendor: CISA KEV
- CVE: CVE-2026-125350
