CVE-2026-125347 Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML p...
CriticalCVSS 9.6
- Published
- Updated
- Exploit status
- No public exploit known
Description
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | >= 157.0.8103.50, < 157.0.8103.50 | 157.0.8103.50 |