Vulnerability record/PUBLISHED/Published Nov 11, 2026 22:39:04 UTC
CVE-2026-126852
Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityChrome
Last updatedNov 11, 2026 22:39:04 UTC
PublishedNov 11, 2026 22:39:04 UTC
ReservedNov 11, 2026 22:08:11 UTC