CVE-2026-125346

Published Nov 10, 2026 CVSS n/a EPSS n/a KEV · Not listed
Description
Duplicate CVE. Replaced by CVE-2026-125350

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References

No reference.

History
Type Values Removed Values Added
Description Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Duplicate CVE. Replaced by CVE-2026-125350
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Type Values Removed Values Added
Description Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References

Subscriptions

No data.

Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
Chrome
Published
Updated
Nov 11, 2026, 7:08 PM
Reserved
Nov 9, 2026, 9:43 PM
Status
Rejected
Published
Nov 10, 2026, 6:17 PM
Modified
Nov 11, 2026, 7:17 PM