{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-126922", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2026-11-11T22:11:41.059Z", "datePublished": "2026-11-11T22:38:59.338Z", "dateUpdated": "2026-11-12T17:30:29.236Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "157.0.8103.78", "status": "affected", "lessThan": "157.0.8103.78", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Out of bounds read", "cweId": "CWE-125"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2026-11-11T22:38:59.338Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"}, {"url": "https://issues.chromium.org/issues/577341943"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-11-12T17:30:20.895084Z", "id": "CVE-2026-126922", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-12T17:30:29.236Z"}}]}}

{}

{"affected": [{"affectedData": [{"product": "Chrome", "vendor": "Google", "versions": [{"lessThan": "157.0.8103.78", "status": "affected", "version": "157.0.8103.78", "versionType": "custom"}]}], "source": "chrome-cve-admin@google.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "matchCriteriaId": "8F6B0625-AEDC-487A-87B8-8BB68A506D55", "versionEndExcluding": "157.0.8103.78", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"}], "id": "CVE-2026-126922", "lastModified": "2026-11-13T15:43:58.947", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-126922", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-12T17:30:20.895084Z", "version": "2.0.3"}}]}, "published": "2026-11-11T23:17:22.800", "references": [{"source": "chrome-cve-admin@google.com", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html"}, {"source": "chrome-cve-admin@google.com", "tags": ["Permissions Required"], "url": "https://issues.chromium.org/issues/577341943"}], "sourceIdentifier": "chrome-cve-admin@google.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "chrome-cve-admin@google.com", "type": "Secondary"}]}

{"bugzilla": {"description": "chromium-browser: chromium-browser: Information disclosure via out-of-bounds read in Skia", "id": "2572007", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2572007"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-125", "details": ["A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the Skia graphics component allows a remote attacker who has already compromised the browser's renderer process to access sensitive memory. By tricking a user into viewing a crafted HTML page, the attacker can leak cross-origin data, compromising confidential information from other websites."], "mitigation": {"lang": "en:us", "value": "Avoid opening untrusted web pages or untrusted HTML documents in the browser. Ensure that chromium-browser is executed with its built-in sandbox and site isolation active, avoiding command-line options such as `--no-sandbox` or `--disable-site-isolation-trials`.\nIf chromium-browser is not strictly needed on the system, remove the package to eliminate the attack surface:\n```\n# dnf remove chromium-browser\n```\nCaveats: Restricting browser usage to trusted sites relies on operational discipline and may not be feasible in standard web workflows. Removing the package eliminates web browsing capabilities and may affect desktop applications or helper scripts that depend on chromium-browser."}, "name": "CVE-2026-126922", "public_date": "2026-11-11T22:38:59Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-126922\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-126922\nhttps://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_01744469280.html\nhttps://issues.chromium.org/issues/577341943"], "statement": "This vulnerability is assessed as having a Moderate severity rather than Important because exploitation requires a pre-existing compromise of the browser's sandboxed renderer process. On Red Hat Enterprise Linux systems where chromium-browser is deployed, default multi-process sandboxing restricts the blast radius of renderer compromises from accessing the underlying operating system. Consequently, an attacker who induces a user to process malicious web content can only leak cross-origin memory within the browser session, without achieving arbitrary host code execution or elevated system privileges.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[157.0.8103.78,157.0.8103.78)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Chrome", "source": "cna", "vendor": "Google"}, "product": "chrome", "vendor": "google"}], "created": "2026-11-12T17:45:06.418839+00:00", "updated": "2026-11-13T03:15:13.788818+00:00", "vendors": ["google", "google$PRODUCT$chrome"]}