← Vulnerability Intelligence

CVE-2026-119272

Medium 4.3

Description

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Metrics

CVSS 3.1
4.3 (MEDIUM) Score source: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS — exploit probability
0% (percentile: 6) as of 1 November 2026
CWE
CWE-125

Affected products

google: chrome

References