CVE-2026-126859
What this means
The severity of this vulnerability has not been scored yet. There is no confirmed exploitation of it yet.
Full vendor description
Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Scoring and exploitation
Not reported
- Not reported
- Exploited in the wild
- Not confirmed in the
- Not reported
Weaknesses
CWE-59
References
2 links from the CVE record, grouped by site.
chromereleases.googleblog.com1 link
issues.chromium.org1 link