CVE-2026-121124
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Nov 3, 2026
CISA due date
—
The record
Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|