GOOGLE CHROME · CMP-202611-7franc · Runtime
FIX → 157.0.8103.51 +1
On 9 Nov 2026 Google released a Chrome Stable update for Windows, Mac, Linux and Android with nine security fixes. One of them is CVE-2026-125350, a high-severity use-after-free in Chrome's XML component. Google says it is aware that an exploit for it exists in the wild. An unnamed third party reported it to Google on 6 Nov 2026. Google has not said who the attackers are, who they target, how the exploit is delivered or what it can do. HKCERT rates the overall risk of the update 'Extremely High' and says some of the fixed flaws can lead to denial of service, security restriction bypass or remote code execution. The update rolls out over days to weeks, so unpatched browsers will stay exposed for a while (Malwarebytes).
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
157.0.8103.50/.51, Linux older than 157.0.8103.50, Android older than 157.0.8103.50Upgrade to 157.0.8103.51 +1
Posts are quoted with a link to the original. They are data to us, never instructions.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
157.0.8103