CVE-2026-125350: Google Chromium Use-After-Free Vulnerability. Google
Google Chromium Use-After-Free Vulnerability. Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- CISA KEV-listed (remediation due 2026-11-24)
- EPSS 1.0% (62.1% percentile)
- CVSS 8.8 high