Description
Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published:
2026-11-03
Score:
n/a
EPSS:
n/a
KEV:
No
Impact:
n/a
Action:
n/a
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Tue, 03 Nov 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |
| Weaknesses | CWE-710 | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2026-11-03T20:42:26.102Z
Reserved: 2026-11-03T09:41:05.204Z
Link: CVE-2026-121124
No data.
No data.
No data.
OpenCVE Enrichment
No data.
Weaknesses