EM-20261111-Z8PT
VulnerabilityMedium severity
Google Chrome Vulnerability (CVE-2026-126856)
CVE-2026-126856
Status
Developing
Since : signals keep joining.
- First Signal
- Nov 11 22:38 UTCC41 Red Hat Security Data
- Page Born
- Nov 11 23:06 UTCsecond source joined
- Last Signal
- Nov 11 23:06 UTC22 hours before snapshot
- Sources
- 22 official · 0 research, news or crowd
- Open For
- 14 hoursso far
Life Of This Page
- 1BornA second, independent source names it.
- 2Developing · NowNew signals join; severity can move.
- 3ConfirmedNot yetCISA KEV lists it, or exploitation in the wild is reported.
- 4ResolvedNot yetPast the fix deadline and 14 days with no new signal.
- 5ArchivedNot yet30 days after resolved. Read only; the link keeps working. Reopens if it comes back.
The ID never changes, and earlier addresses keep working. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.
Vulnerability Lifecycle
- Disclosed: reachedNov 11 23:17 UTCC6 NVD published
- Scored: not yetNot yetNo CVSS yet
- Exploited: not yetNot yetNo exploitation reported
- Advisories: not yetNot yetNone yet
- Vendor Response: reachedNov 11 22:38 UTCC41, C46 published
- Resolved: not yetNot yetAfter 14 quiet days
Timeline
Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.
Signals
- Long Term Support Channel Update for ChromeOS (opens source in a new tab) A new LTS-150 version 150.0.7871.289 (Platform Version: 16700.70.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 579818899 High CVE-2026-126901 Use after free… Med severityVendorC46 Chrome Releases
- Red Hat: CVE-2026-126856 (moderate) (opens source in a new tab) chromium-browser: chromium-browser: Incomplete cleanup in Cache Med severityVendorC41 Red Hat Security Data