Critical
9.6
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote...
CVE-2026-125347
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| GoogleChrome |
< 157.0.8103.50→ 157.0.8103.50 |
157.0.8103.50 |
Fix status by distribution
Records published by each distribution for this CVE. Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2026-125347 chromium No fixed version in this record
Original description The description as published by the source.
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Source: Google Chrome Releases NVD GitHub Advisory
References
- CHROME-RELEASES Stable Channel Update for Desktop
- web chrome-cve-admin@google.com
- web chrome-cve-admin@google.com
- web nvd.nist.gov
- web github.com