Google Chrome: Use-after-free in XML component (CVE-2026-125350)
Google has patched a high-severity use-after-free vulnerability in the Chrome XML component that is currently being exploited in the wild.
CVE search metadata
CVE search record: CVE-2026-125350. KEV: no. Product: Chrome. Brief: Google Chrome: Use-after-free in XML component (CVE-2026-125350). Brief link: https://feed.craftedsignal.io/briefs/2026-11-chrome-xml-uaf/
Triage facts
Revision 1- Applicability
- Chrome
- Evidence
- Confirmed activeHigh confidence
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 10, 08:36 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C2Likely
Google has released security updates for Chrome to address nine vulnerabilities, including CVE-2026-125350, a high-severity use-after-free flaw in the browser's XML component. This vulnerability is confirmed to be exploited in the wild. Google has not shared additional details regarding the attacks.