Skip to main content
CVE-2026-125348VulnerabilityPublished

GPU · Out-of-bounds Write

Source GCVE Database

0
Compare
Authoritative record:CVE-2026-125348· High

Not known to be exploited : upgrade to 157.0.8103.50 soon.

Data as of 10 Nov 2026, 19:33 UTC

Severity
High

Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in 157.0.8103.50

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 10 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

What to do

Upgrade Chrome to 157.0.8103.50.

Affected software

ProductAffectedFixed in
GoogleChromeAffected
  • >=157.0.8103.50 <157.0.8103.50
Fixed in
  • 157.0.8103.50

AI-suggested

A fix is available in Google Chrome version 157.0.8103.50 and later. Users and administrators should update affected Chrome installations to this version or newer to remediate the vulnerability. No additional mitigation steps are indicated.

Description

A high-severity out-of-bounds write vulnerability exists in the GPU component of Google Chrome versions prior to 157.0.8103.50. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page.

References

Community reviews

Loading reviews…