CVE-2026-125345
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a c
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-908
Not enough EPSS history yet.
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-961587.0 HIG—
——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.4hCVE-2026-961565.5 MED—
——0Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.4hCVE-2026-961505.6 MED—
——0Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.4hCVE-2026-961444.7 MED—
——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4hCVE-2026-960484.7 MED—
——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4hCVE-2026-960225.6 MED—
——0Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.4h