{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-126918", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-11-11T22:11:31.020Z", "datePublished": "2026-11-11T22:38:56.649Z", "dateUpdated": "2026-11-12T16:09:11.124Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "157.0.8103.78", "status": "affected", "lessThan": "157.0.8103.78", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Use after free", "cweId": "CWE-416"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-11-11T22:38:56.649Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"}, {"url": "https://issues.chromium.org/issues/576855527"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-11-12T16:06:19.022946Z", "id": "CVE-2026-126918", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-12T16:09:11.124Z"}}]}}

{}

{"affected": [{"affectedData": [{"product": "Chrome", "vendor": "Google", "versions": [{"lessThan": "157.0.8103.78", "status": "affected", "version": "157.0.8103.78", "versionType": "custom"}]}], "source": "chrome-cve-admin@google.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}], "id": "CVE-2026-126918", "lastModified": "2026-11-12T17:17:42.353", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-126918", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-12T16:06:19.022946Z", "version": "2.0.3"}}]}, "published": "2026-11-11T23:17:22.267", "references": [{"source": "chrome-cve-admin@google.com", "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"}, {"source": "chrome-cve-admin@google.com", "url": "https://issues.chromium.org/issues/576855527"}], "sourceIdentifier": "chrome-cve-admin@google.com", "vulnStatus": "Undergoing Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "chrome-cve-admin@google.com", "type": "Secondary"}]}

{"bugzilla": {"description": "chromium-browser: chromium-browser: Arbitrary code execution in Layout via crafted HTML page", "id": "2571987", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2571987"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-825", "details": ["A flaw was found in chromium-browser. This vulnerability exists due to a use-after-free condition in the Layout component, where the application references memory after it has been released. A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox environment."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-126918", "public_date": "2026-11-11T22:38:56Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-126918\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-126918\nhttps://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html\nhttps://issues.chromium.org/issues/576855527"], "statement": "This vulnerability is rated as having Important impact because, although it allows remote code execution when a user visits a malicious webpage, execution is constrained within the browser renderer sandbox and requires user interaction. Exploitation cannot directly compromise the underlying operating system or access host resources without an accompanying sandbox escape vulnerability. Red Hat Enterprise Linux workstation deployments are primarily exposed when users interact with untrusted web content.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,157.0.8103.78)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Chrome", "source": "cna", "vendor": "Google"}, "product": "chrome", "vendor": "google"}], "created": "2026-11-12T17:45:06.419101+00:00", "updated": "2026-11-13T03:15:13.789695+00:00", "vendors": ["google", "google$PRODUCT$chrome"]}