Known Exploited Vulnerabilities November 10, 2026 · CISA KEV Catalog

CVE-2026-125350: Google Chromium Use-After-Free Vulnerability

Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-125350 Google
Related: CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability Known Exploited Vulnerabilities · Oct 27, 2026
CVE-2026-58704: Google Pixel Improper Authorization Vulnerability Known Exploited Vulnerabilities · Sep 16, 2026
CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability Known Exploited Vulnerabilities · Sep 09, 2026