CVE-2026-126879

Google Chrome remote code execution in Layout

high · 8.8

Fix listed

Google Chrome

Published Nov 11, 2026, 22:38 UTC

Description

Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Reported fixed versions

157.0.8103.78

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.