EUVD Vulnerability Catalog Actively Exploited (KEV)

EUVD-2026-121390

Severity: UNKNOWN Base Score: 0 CVSS Version:

Vulnerability Description

Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Vendors & Systems

Vendor Google

References & Advisory Links

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

Chrome

EPSS Probability

0

Known Aliases
CVE-2026-125350 GHSA-rm6p-3338-xx33
Published On

2026-11-10

Last Updated

2026-11-10

Exploited Since

2026-11-10