Use-After-Free Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 10 Nov 2026.
CVE-2026-125350High8.8
Chance of exploitation in the next 30 days
0.96%
EPSS score from FIRST
Black Shard's team can check your exposure to CVE-2026-125350 and take the fix off your plate.
Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Updated 13 Nov 2026, 11:36 UTC, 30 of 36 sources answering.
Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.