Main Vulnerability Database Vulnerabilities #VU159033

Improper Adherence to Coding Standards in Google Chromium - CVE-2026-121124

Published: November 4, 2026

Vulnerability identifier: #VU159033

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-121124

CWE-ID: CWE-710

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to potentially trigger unintended behavior in Google Chrome's XML processing; the specific security impact is not described.

The vulnerability exists due to improper adherence to coding standards in Google Chrome's XML component when processing XML content. A remote attacker can potentially supply crafted XML content to trigger unintended processing behavior, although the advisory does not specify the exploitation mechanism.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-121124

Install security update from vendor's website.

Google Chromium - update to 157.0.8103.38
Google Chrome - update to 157.0.8103.38

External References

Related Security Bulletins