CVE-2026-126899

Google Chrome use-after-free in Elements allows code execution

high · 8.8

Fix listed

Google Chrome

Published Nov 11, 2026, 22:39 UTC

Description

Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Reported fixed versions

157.0.8103.78

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.