High 1 exploited CVE WID-SEC-2026-4417 9 CVEs

Google Chrome / Microsoft Edge: Mehrere Schwachstellen

Published Nov 9, 2026 · Updated Nov 10, 2026 · Revision 2 · de

Vendor: Google Vendor: Microsoft Product: Chrome Product: Edge Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um möglicherweise Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder beliebigen Code auszuführen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 9

High 8.8

CVE-2026-125350 Exploited Public exploit

Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code insid…

Google Chrome chromium chromium Browsers Debian Azure Linux Alpine Wolfi

Nov 10, 2026
KEV Nov 10, 2026
Critical 9.6

CVE-2026-125347

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging soci…

Google Chrome chromium Browsers Debian

Nov 10, 2026
High 8.8

CVE-2026-125344

Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside…

Google Chrome chromium Browsers Debian

Nov 10, 2026
High 8.8

CVE-2026-125346 Rejected

Duplicate CVE. Replaced by CVE-2026-125350

chromium chromium libxslt libxslt-static Debian Wolfi

Nov 10, 2026
High 8.8

CVE-2026-125348

Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arb…

Google Chrome chromium Browsers Debian

Nov 10, 2026
High 8.3

CVE-2026-125343

Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised th…

Google Chrome chromium Browsers Debian

Nov 10, 2026
Medium 4.7

CVE-2026-125342

Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside …

Google Chrome chromium Browsers Debian

Nov 10, 2026
Medium 4.7

CVE-2026-125345

Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outsid…

Google Chrome chromium Browsers Debian

Nov 10, 2026
Low 3.4

CVE-2026-125349

Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had c…

Google Chrome chromium Browsers Debian

Nov 10, 2026

Revision history

2026-11-10 #2
Referenz(en) aufgenommen: EUVD-2026-121391, EUVD-2026-121392, EUVD-2026-121390, EUVD-2026-121417, EUVD-2026-121416, EUVD-2026-121415, EUVD-2026-121414, EUVD-2026-121389, EUVD-2026-121413
2026-11-09 #1
Initiale Fassung

References

Google Chrome Stable Channel Update vom 2026-11-09
https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
Release notes for Microsoft Edge Security Updates vom 2026-11-09
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security