{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-126847", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-11-11T22:08:02.103Z", "datePublished": "2026-11-11T22:38:51.851Z", "dateUpdated": "2026-11-12T16:12:39.983Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "157.0.8103.78", "status": "affected", "lessThan": "157.0.8103.78", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Type confusion", "cweId": "CWE-843"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-11-11T22:38:51.851Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"}, {"url": "https://issues.chromium.org/issues/572988453"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-11-12T16:08:16.762764Z", "id": "CVE-2026-126847", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-12T16:12:39.983Z"}}]}}

{}

{"affected": [{"affectedData": [{"product": "Chrome", "vendor": "Google", "versions": [{"lessThan": "157.0.8103.78", "status": "affected", "version": "157.0.8103.78", "versionType": "custom"}]}], "source": "chrome-cve-admin@google.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "matchCriteriaId": "8F6B0625-AEDC-487A-87B8-8BB68A506D55", "versionEndExcluding": "157.0.8103.78", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}], "id": "CVE-2026-126847", "lastModified": "2026-11-12T19:51:12.953", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-126847", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-12T16:08:16.762764Z", "version": "2.0.3"}}]}, "published": "2026-11-11T23:17:12.527", "references": [{"source": "chrome-cve-admin@google.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"}, {"source": "chrome-cve-admin@google.com", "tags": ["Permissions Required"], "url": "https://issues.chromium.org/issues/572988453"}], "sourceIdentifier": "chrome-cve-admin@google.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-843"}], "source": "chrome-cve-admin@google.com", "type": "Secondary"}]}

{"bugzilla": {"description": "chromium-browser: chromium-browser: Arbitrary code execution via type confusion in V8", "id": "2571983", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571983"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-843", "details": ["A flaw was found in the V8 JavaScript engine in chromium-browser. A remote attacker could exploit this type confusion vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser sandbox."], "mitigation": {"lang": "en:us", "value": "Exercise operational precautions when browsing and ensure process isolation is strictly maintained:\n1. Operational controls: Avoid visiting untrusted or unverified websites and do not open untrusted HTML files or embedded links from unverified sources.\n2. Maintain sandboxing: Ensure Chromium is never launched with flags that disable security isolation (such as `--no-sandbox`). Operating system sandboxing is essential to restrict the blast radius of a compromised renderer process to the isolated browser sandbox.\n3. Package removal: If web browsing functionality is not required on the system, remove the Chromium package using:\n```\nsudo dnf remove chromium\n```\nCaveats: Avoiding untrusted sites relies on user diligence and does not protect against compromised legitimate sites. Removing Chromium eliminates browser availability on the host, though server administration remains unaffected via terminal sessions."}, "name": "CVE-2026-126847", "public_date": "2026-11-11T22:38:51Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-126847\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-126847\nhttps://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html\nhttps://issues.chromium.org/issues/572988453"], "statement": "Red Hat Product Security rates this flaw as Important because successful exploitation allows an unauthenticated remote attacker to achieve arbitrary code execution within the browser's isolated renderer environment. The vulnerability requires user interaction, specifically convincing a user to process malicious web content in Chromium. While the flaw poses a significant integrity and confidentiality threat to the browser session, the impact is constrained by Chromium's operating system sandbox, preventing direct compromise of the underlying host unless chained with a separate privilege escalation or sandbox escape vulnerability.", "threat_severity": "Important"}

{"created": "2026-11-12T18:30:07.053306+00:00", "updated": "2026-11-12T18:30:07.053315+00:00", "vendors": []}