Google · Chromium
CVE-2026-125350
Google Chromium Use-After-Free Vulnerability
Nedir
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CISA: Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Ne yapmalı
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
ABD federal kurumları için son tarih: 24 Kasım 2026
Google için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 17 Şub 2026 | CSS Use-After-Free | Chromium | Yüksek 8,8 | 54% |
| 12 Ara 2025 | Out of Bounds Memory Access | Chromium | Yüksek 8,8 | 43% |
| 22 Tem 2025 | ANGLE and GPU Improper Input Validation | Chromium | Yüksek 8,8 | 11% |
| 13 May 2024 | Visuals Use-After-Free | Chromium | Kritik 9,6 | 8,3% |
| 3 Kas 2021 | Race Condition | Chromium | Yüksek 8,8 | 24% |
| 3 Kas 2021 | Information Disclosure | Chromium | Orta 6,5 | 20% |
| 27 Eki 2026 | Unchecked Return Value | Brotli | Kritik 9,2 | 83% |
| 16 Eyl 2026 | Improper Authorization | Pixel | Yüksek 8,8 | 0,6% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.