{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-126916", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-11-11T22:11:26.019Z", "datePublished": "2026-11-11T22:38:52.403Z", "dateUpdated": "2026-11-12T16:12:09.011Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "157.0.8103.78", "status": "affected", "lessThan": "157.0.8103.78", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Integer overflow", "cweId": "CWE-190"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-11-11T22:38:52.403Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"}, {"url": "https://issues.chromium.org/issues/574025697"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-11-12T16:07:58.066678Z", "id": "CVE-2026-126916", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-12T16:12:09.011Z"}}]}}

{}

{"affected": [{"affectedData": [{"product": "Chrome", "vendor": "Google", "versions": [{"lessThan": "157.0.8103.78", "status": "affected", "version": "157.0.8103.78", "versionType": "custom"}]}], "source": "chrome-cve-admin@google.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)"}], "id": "CVE-2026-126916", "lastModified": "2026-11-12T17:17:41.933", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-126916", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-12T16:07:58.066678Z", "version": "2.0.3"}}]}, "published": "2026-11-11T23:17:21.950", "references": [{"source": "chrome-cve-admin@google.com", "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"}, {"source": "chrome-cve-admin@google.com", "url": "https://issues.chromium.org/issues/574025697"}], "sourceIdentifier": "chrome-cve-admin@google.com", "vulnStatus": "Undergoing Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "chrome-cve-admin@google.com", "type": "Secondary"}]}

{"bugzilla": {"description": "chromium-browser: chromium-browser: arbitrary code execution via integer overflow in V8", "id": "2572008", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2572008"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-190", "details": ["A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by enticing a user to visit a crafted HTML page. The vulnerability is caused by an integer overflow in the V8 JavaScript engine during content processing."], "mitigation": {"lang": "en:us", "value": "Operational mitigation involves restricting exposure to untrusted web content and ensuring sandbox restrictions remain enforced:\n1. Avoid visiting untrusted websites or following unverified links within the browser.\n2. Ensure Chromium's built-in sandbox remains active and is never bypassed (do not launch the browser with flags that disable sandboxing).\nCaveats:\nThese operational measures reduce the probability of encountering exploit vectors and restrict unauthorized execution to the isolated renderer process, but they do not eliminate the underlying defect when processing untrusted JavaScript."}, "name": "CVE-2026-126916", "public_date": "2026-11-11T22:38:52Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-126916\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-126916\nhttps://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html\nhttps://issues.chromium.org/issues/574025697"], "statement": "This vulnerability is rated as Important rather than Critical because successful exploitation is confined within the application's renderer sandbox, preventing direct access to the underlying operating system without an accompanying sandbox escape. An unauthenticated remote attacker can trigger this flaw by convincing a user to navigate to malicious web content. In Red Hat Enterprise Linux workstation and desktop installations where Chromium is utilized, exploitation requires active user interaction, which prevents direct or automated network-based compromise.", "threat_severity": "Important"}

{"created": "2026-11-12T17:45:06.419680+00:00", "updated": "2026-11-12T17:45:06.419682+00:00", "vendors": []}