{"id":"CVE-2026-126865","kind":"vulnerability","aliases":["CVE-2026-126865"],"related":[],"title":"Chrome: use-after-free in DOM lets a web page run code","description":"Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"Google Chrome has a use-after-free bug in its DOM code, fixed in version 157.0.8103.78. A remote attacker can run arbitrary code inside the browser sandbox by getting the victim to open a crafted HTML page.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","endpoints","other"],"not_affected_if":["chrome-up-to-date"],"how_to_check":"- Open Chrome and check the version under Help > About Google Chrome, or run `chrome --version` on the command line.\n- Compare the installed version with `157.0.8103.78`; anything older is affected.","fix":"- Google Chrome: update to `157.0.8103.78` or later.","status":"open","published_at":"2026-11-11T23:17:14+00:00","first_seen_at":"2026-11-11T23:29:37+00:00","triaged_at":"2026-11-11T23:33:25+00:00","updated_at":"2026-11-11T23:33:25+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-11-11T23:33:25Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome: update to `157.0.8103.78` or later.","reach":"internet","title":"Chrome: use-after-free in DOM lets a web page run code","impact":"high","summary":"Google Chrome has a use-after-free bug in its DOM code, fixed in version 157.0.8103.78. A remote attacker can run arbitrary code inside the browser sandbox by getting the victim to open a crafted HTML page.","audience":"everyone","category":"other","nicknames":[],"who_cares":["chrome","browsers","endpoints"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs code inside the browser sandbox after a victim visits a page.","analyst_note":"","how_to_check":"- Open Chrome and check the version under Help > About Google Chrome, or run `chrome --version` on the command line.\n- Compare the installed version with `157.0.8103.78`; anything older is affected.","plain_action":"Update Google Chrome to version 157.0.8103.78 or later: open the menu, choose Help > About Google Chrome, and let it install the update.","product_name":"","needs_analyst":false,"not_affected_if":["chrome-up-to-date"],"who_is_affected":"Anyone running Google Chrome older than 157.0.8103.78 is exposed, since the flaw is triggered by a crafted HTML page loaded in the browser. Chromium-based browsers that have not yet picked up the Chromium fix may also be affected, but the sources only name Google Chrome. Managed fleets that pin Chrome versions should treat this as applicable.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000744,"input_tokens":4529,"output_tokens":582,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-126865':16A,19A '-2026':15A,18A '157.0.8103.78':39B,71C 'allow':72C 'arbitrari':45B,78C 'attack':42B,75C 'browser':20B,49B 'bug':31B 'chrome':1A,21B,24B,68C 'chromium':88C 'code':13A,35B,46B,79C 'craft':58B,85C 'cve':14A,17A 'dom':7A,34B,65C 'endpoint':22B 'execut':77C 'fix':36B 'free':5A,30B,63C 'get':52B 'googl':23B,67C 'high':91C 'html':59B,86C 'insid':47B,80C 'let':8A 'open':56B 'page':11A,60B,87C 'prior':69C 'remot':41B,74C 'run':12A,44B 'sandbox':50B,82C 'secur':89C 'sever':90C 'use':3A,28B,61C 'use-after-fre':2A,27B 'version':38B 'via':83C 'victim':54B 'web':10A","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome older than 157.0.8103.78 is exposed, since the flaw is triggered by a crafted HTML page loaded in the browser. Chromium-based browsers that have not yet picked up the Chromium fix may also be affected, but the sources only name Google Chrome. Managed fleets that pin Chrome versions should treat this as applicable.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome to version 157.0.8103.78 or later: open the menu, choose Help > About Google Chrome, and let it install the update.","pkeys":[],"ptokens":[],"labels":["browsers","chrome","endpoints","high","other"],"campaign_type":null,"search_a":"'-126865':16A,19A '-2026':15A,18A 'chrome':1A 'code':13A 'cve':14A,17A 'dom':7A 'free':5A 'let':8A 'page':11A 'run':12A 'use':3A 'use-after-fre':2A 'web':10A","search_b":"'157.0.8103.78':39B 'arbitrari':45B 'attack':42B 'browser':20B,49B 'bug':31B 'chrome':21B,24B 'code':35B,46B 'craft':58B 'dom':34B 'endpoint':22B 'fix':36B 'free':30B 'get':52B 'googl':23B 'html':59B 'insid':47B 'open':56B 'page':60B 'remot':41B 'run':44B 'sandbox':50B 'use':28B 'use-after-fre':27B 'version':38B 'victim':54B","search_c":"'157.0.8103.78':71C 'allow':72C 'arbitrari':78C 'attack':75C 'chrome':68C 'chromium':88C 'code':79C 'craft':85C 'dom':65C 'execut':77C 'free':63C 'googl':67C 'high':91C 'html':86C 'insid':80C 'page':87C 'prior':69C 'remot':74C 'sandbox':82C 'secur':89C 'sever':90C 'use':61C 'via':83C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T23:17:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-126865","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126865","severity":null,"published_at":"2026-11-11T23:17:14+00:00","modified_at":"2026-11-11T23:17:15+00:00","first_seen_at":"2026-11-11T23:29:37+00:00","fetched_at":"2026-11-11T23:29:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}