Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-125347

Quick assessment

Affected

Google Chrome

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Google Chrome 157.0.8103.50 之前的版本中，文件系统（FileSystem）存在授权验证缺陷。该漏洞允许远程攻击者通过社会工程手段，利用特制的 HTML 页面在沙箱之外执行任意代码。（Chromium 安全严重性：高）

AI Predicted 8.8 Difficulty: Easy Updated Nov 11, 2026

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Google	Chrome	`157.0.8103.50< 157.0.8103.50`	affected

Updated Nov 11, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

授权机制不正确

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Google	Chrome	157.0.8103.50 ~ 157.0.8103.50	-

II. Public POCs for CVE-2026-125347

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-125347

请登录查看更多情报信息。

Security Blog Posts for CVE-2026-125347 (1)

🔗 Chrome Releases: Stable Channel Update for Desktop Read full article

Vendor Pages for CVE-2026-125347 (1)

🔗 [561996724] - Chromium

https://www.cve.org/CVERecord?id=CVE-2026-125347

Same Patch Batch · Google · 2026-11-10 · 167 CVEs total

CVE-2026-56951		vkDecoder 逻辑错误致主机指针泄露漏洞
CVE-2026-57010		data_manager 越界写漏洞：无需交互的远程提权
CVE-2026-57009		GC2AvcDec 逻辑错误致本地提权漏洞
CVE-2026-57005		Android 8.0 以下 EuiccPort 混淆代理漏洞
CVE-2026-57004		PresenceDecoderV1 越界写入导致远程提权漏洞
CVE-2026-56995		共享内存内存损坏漏洞：需系统权限提权
CVE-2026-56980		data_flow_manager 整数溢出导致越界写漏洞
CVE-2026-56971		AudioSession 双释放漏洞：远程代码执行
CVE-2026-56969		edgetpu 逻辑错误导致 Use After Free 漏洞
CVE-2026-56966		Chrome hal_override_options 混淆副手漏洞
CVE-2026-56956		TextRtpPayloadEncoderNode 堆缓冲区溢出漏洞
CVE-2026-56943		Android 7.0 本地越界读取漏洞
CVE-2026-56933		efw_ap_transport.c 非堆缓冲区溢出
CVE-2026-56934		Linux IOMMU 逻辑错误致本地提权漏洞
CVE-2026-56935		storage.c 逻辑错误致本地信息泄露
CVE-2026-56938		ipc.c 竞态条件导致 Use After Free 漏洞
CVE-2026-56946		arm-smmu-v3 逻辑错误导致本地提权
CVE-2026-56949		多地点竞态条件致共享内存固件被改，导致本地提权
CVE-2026-56947		Android PhoneInterfaceManager 权限绕过漏洞
CVE-2026-57013		多文件安全协处理器因默认值不当致本地提权漏洞

Showing top 20 of 167 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Chrome

Same vendor: Google

Same weakness: CWE-863