Google Chromium Use-After-Free Vulnerability
- Level
- Minor (1/5)
- Command
- CYBERCOM
- Region
- Cyber
- Category
- Cyber threat
- Source
- CISA Known Exploited Vulnerabilities
At a glance
- What
- Cyber Threat
- Who
- CISA Known Exploited Vulnerabilities
- When
- Nov 10, 2026 at 12:00 AM UTC
- Pace
- 28th Cyber threat alert at severity 1+ in the last 30 days
Official Statements
CISA Known Exploited Vulnerabilities, November 10: โGoogle Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.โ
Source: CISA Known Exploited Vulnerabilities