CVE-2026-125350

CVE Enrichment

CISA KEV: Not listed

Last enrichment sync: 10-Nov-2026 18:07
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (4)

Google has released an emergency security update addressing CVE-2026-125350, a high-severity zero-day vulnerability in the XML component of Google Chrome that is already being exploited in real-world attacks. Google Patches Exploited Chrome XML Use-After-Free Zero-Day
The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (CVSS score: N/A), has been described as a use-after-free bug in the XML component. Google Patches Actively Exploited Chrome XML Use-After-Free Flaw
The exploited vulnerability, tracked as CVE-2026-125350 and rated high severity, is a use-after-free in the web browser’s XML component. Google Patches Exploited Chrome XML Zero-Day in Update Fixing Nine Flaws
"Google is aware that an exploit for CVE-2026-125350 exists in the wild," the company said in a Monday security advisory. Google Patches Chrome Zero-Day CVE-2026-125350, Eighth Exploited This Year

CVE (7)

MITRE ATT&CK (1)

Vendors (1)

Products (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.