{"id":"CVE-2026-126861","kind":"vulnerability","aliases":["CVE-2026-126861"],"related":[],"title":"Chrome on Android: media use-after-free lets a web page run code","description":"Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"A use-after-free bug in the Media component of Google Chrome on Android lets a remote attacker run arbitrary code inside the browser sandbox when a user opens a crafted HTML page. Chromium rates it High severity.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","browser","chrome","other"],"not_affected_if":["already-updated","non-android"],"how_to_check":"- Open Chrome on the Android device and check the version under Settings > About Chrome\n- Compare against the fixed version `157.0.8103.78`","fix":"- Google Chrome on Android: upgrade to `157.0.8103.78` or later","status":"open","published_at":"2026-11-11T23:17:14+00:00","first_seen_at":"2026-11-11T23:29:37+00:00","triaged_at":"2026-11-11T23:33:29+00:00","updated_at":"2026-11-11T23:33:29+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-11-11T23:33:29Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome on Android: upgrade to `157.0.8103.78` or later","reach":"internet","title":"Chrome on Android: media use-after-free lets a web page run code","impact":"high","summary":"A use-after-free bug in the Media component of Google Chrome on Android lets a remote attacker run arbitrary code inside the browser sandbox when a user opens a crafted HTML page. Chromium rates it High severity.","audience":"everyone","category":"other","nicknames":[],"who_cares":["chrome","android","browser"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Arbitrary code runs inside the browser sandbox on the phone","analyst_note":"","how_to_check":"- Open Chrome on the Android device and check the version under Settings > About Chrome\n- Compare against the fixed version `157.0.8103.78`","plain_action":"Update Chrome on your Android phone to version 157.0.8103.78 or later through the Google Play Store.","product_name":"","needs_analyst":false,"not_affected_if":["already-updated","non-android"],"who_is_affected":"Anyone running Chrome on Android older than 157.0.8103.78 who visits a malicious or compromised web page. Exposure comes from the browser itself, so any site the user opens can trigger it. Devices already on the fixed version or on other browsers built on a different engine are not affected by this entry.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000719,"input_tokens":4529,"output_tokens":533,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-126861':17A,20A '-2026':16A,19A '157.0.8103.78':76C 'allow':77C 'android':3A,21B,38B,73C 'arbitrari':44B,83C 'attack':42B,80C 'browser':22B,48B 'bug':29B 'chrome':1A,23B,36B,70C 'chromium':58B,93C 'code':14A,45B,84C 'compon':33B 'craft':55B,90C 'cve':15A,18A 'execut':82C 'free':8A,28B,65C 'googl':35B,69C 'high':61B,96C 'html':56B,91C 'insid':46B,85C 'let':9A,39B 'media':4A,32B,67C 'open':53B 'page':12A,57B,92C 'prior':74C 'rate':59B 'remot':41B,79C 'run':13A,43B 'sandbox':49B,87C 'secur':94C 'sever':62B,95C 'use':6A,26B,63C 'use-after-fre':5A,25B 'user':52B 'via':88C 'web':11A","nicknames":[],"mitigations":[],"who_affected":"Anyone running Chrome on Android older than 157.0.8103.78 who visits a malicious or compromised web page. Exposure comes from the browser itself, so any site the user opens can trigger it. Devices already on the fixed version or on other browsers built on a different engine are not affected by this entry.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Chrome on your Android phone to version 157.0.8103.78 or later through the Google Play Store.","pkeys":[],"ptokens":[],"labels":["android","browser","chrome","high","other"],"campaign_type":null,"search_a":"'-126861':17A,20A '-2026':16A,19A 'android':3A 'chrome':1A 'code':14A 'cve':15A,18A 'free':8A 'let':9A 'media':4A 'page':12A 'run':13A 'use':6A 'use-after-fre':5A 'web':11A","search_b":"'android':21B,38B 'arbitrari':44B 'attack':42B 'browser':22B,48B 'bug':29B 'chrome':23B,36B 'chromium':58B 'code':45B 'compon':33B 'craft':55B 'free':28B 'googl':35B 'high':61B 'html':56B 'insid':46B 'let':39B 'media':32B 'open':53B 'page':57B 'rate':59B 'remot':41B 'run':43B 'sandbox':49B 'sever':62B 'use':26B 'use-after-fre':25B 'user':52B","search_c":"'157.0.8103.78':76C 'allow':77C 'android':73C 'arbitrari':83C 'attack':80C 'chrome':70C 'chromium':93C 'code':84C 'craft':90C 'execut':82C 'free':65C 'googl':69C 'high':96C 'html':91C 'insid':85C 'media':67C 'page':92C 'prior':74C 'remot':79C 'sandbox':87C 'secur':94C 'sever':95C 'use':63C 'via':88C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T23:17:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-126861","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126861","severity":null,"published_at":"2026-11-11T23:17:14+00:00","modified_at":"2026-11-11T23:17:14+00:00","first_seen_at":"2026-11-11T23:29:37+00:00","fetched_at":"2026-11-11T23:29:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}