{"id":"EM-20261110-R5PF","url":"https://cyber.eventmonitor.net/incident/EM-20261110-R5PF/cve-2026-125350-google-chromium-use-after-free-vulnerability/","type":"cve","title":"Google Chromium Use-After-Free Vulnerability","subtitle":"CVE-2026-125350","subject":"CVE-2026-125350","status":"Confirmed","severity":"high","affected":["Google Chromium"],"headline":"5 hours from first report to confirmed exploitation.","born":"2026-11-10T06:52:54.000Z","firstSignal":"2026-11-10T00:00:00.000Z","lastSignal":"2026-11-10T18:17:35.237Z","updated":"2026-11-10T20:23:48.430Z","revision":7,"life":[{"status":"Born","at":"2026-11-10T06:52:54.000Z","why":"second independent source: C130 The Hacker News"},{"status":"Developing","at":"2026-11-10T06:52:54.000Z","why":"signals keep joining"},{"status":"Confirmed","at":"2026-11-10T05:26:32.000Z","why":"exploitation in the wild reported"}],"changeLog":[{"at":"2026-11-10T00:00:00.000Z","what":"Source joined: C13 CERT-FR (ANSSI)"},{"at":"2026-11-10T05:26:32.000Z","what":"First signal: C171 GBHackers"},{"at":"2026-11-10T05:26:32.000Z","what":"Status: Confirmed (exploitation in the wild reported)"},{"at":"2026-11-10T06:52:54.000Z","what":"Born: second source, C130 The Hacker News. Page EM-20261110-R5PF created."},{"at":"2026-11-10T09:27:03.000Z","what":"Source joined: C170 CyberInsider"},{"at":"2026-11-10T10:05:00.000Z","what":"Source joined: C172 Security Affairs"},{"at":"2026-11-10T12:00:00.000Z","what":"Source joined: C1 CISA Known Exploited Vulnerabilities"},{"at":"2026-11-10T12:00:00.000Z","what":"Severity raised to High by C1"},{"at":"2026-11-10T18:17:35.237Z","what":"Source joined: C6 NVD CVE API 2.0"},{"at":"2026-11-10T20:23:48.430Z","what":"Title corrected to CISA's name for it (was \"Vulnerability (CVE-2026-125350)\")"}],"stages":[{"name":"Disclosed","at":"2026-11-10T18:17:35.237Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-10T18:17:35.237Z","detail":"CVSS 8.8"},{"name":"Exploited","at":"2026-11-10T05:26:32.000Z","detail":"C1 CISA KEV, fix by 2026-11-24"},{"name":"Advisories","at":"2026-11-10T00:00:00.000Z","detail":"1 government and CERT sources"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"When fixed: KEV deadline 2026-11-24, then 14 quiet days"}],"signals":[{"at":"2026-11-10T00:00:00.000Z","source":"C13","sourceName":"CERT-FR (ANSSI)","role":"Government","severity":2,"title":"Multiples vulnérabilités dans Google Chrome (10 novembre 2026)","text":"De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur. Google indique que la vulnérabilité CVE-2026-125350 est activement exploitée.","url":"https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1488/"},{"at":"2026-11-10T05:26:32.000Z","source":"C171","sourceName":"GBHackers","role":"Research & News","severity":2,"title":"Google Chrome Zero-Day Vulnerability Exploited in the Wild","text":"Google released a Chrome security update that fixes nine vulnerabilities, including a high-severity XML flaw being exploited in the wild. Tracked as CVE-2026-125350, the zero-day makes this release a priority for Windows, macOS, and Linux users. Google published the update on November 9, 2026. The patched versions are 157.0.8103.50/.51 for Windows and Mac, and 157.0.8103.50 [ ] The post Google…","url":"https://gbhackers.com/google-chrome-zero-day-vulnerability-2/"},{"at":"2026-11-10T06:52:54.000Z","source":"C130","sourceName":"The Hacker News","role":"Research & News","severity":2,"title":"Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026","text":"Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has been described as a use-after-free bug in the XML component. Use-after-free bugs typically occur when a program attempts to access a memory location after","url":"https://thehackernews.com/2026/11/google-issues-chrome-security-update.html"},{"at":"2026-11-10T09:27:03.000Z","source":"C170","sourceName":"CyberInsider","role":"Research & News","severity":2,"title":"Google fixes Chrome XML zero-day flaw exploited in attacks","text":"Google released a Chrome security update that addresses nine vulnerabilities, including a high-severity XML flaw exploited in the wild. The security update brings the Stable channel to version 157.0.8103.50/.51 for Windows and macOS and 157.0.8103.50 for Linux, with the rollout to users taking place over the coming days and weeks. Tracked as CVE-2026-125350, the exploited The post Google fixes…","url":"https://cyberinsider.com/chrome-xml-zero-day-exploited-in-attacks/"},{"at":"2026-11-10T10:05:00.000Z","source":"C172","sourceName":"Security Affairs","role":"Research & News","severity":2,"title":"Google fixes the eighth actively exploited Chrome zero-day of 2026","text":"Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild. Google has addressed multiple security vulnerabilities, one of which, tracked as CVE-2026-125350, has been actively exploited in the wild. The vulnerability is a use after free issue that resides in XML and was reported [ ]","url":"https://securityaffairs.com/202772/breaking-news/google-fixes-the-eighth-actively-exploited-chrome-zero-day-of-2026.html"},{"at":"2026-11-10T12:00:00.000Z","source":"C1","sourceName":"CISA Known Exploited Vulnerabilities","role":"Exploited List","severity":3,"title":"CVE-2026-125350 added to KEV: Google Chromium Use-After-Free Vulnerability","text":"Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"at":"2026-11-10T18:17:35.237Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":3,"title":"CVE-2026-125350 (CVSS 8.8)","text":"Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125350"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-10T18:17:35.237","score":8.8,"severity":"HIGH","desc":"Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","product":"","seen":1794342228430},"kev":{"added":"2026-11-10","due":"2026-11-24","ransomware":"Unknown","vendor":"Google","product":"Chromium","name":"Google Chromium Use-After-Free Vulnerability"},"epss":null,"p0":true},"mergedInto":null,"publisher":"Event Monitor Cyber"}