CVE Watch10 de nov. de 2026

CVE-2026-125349

Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the render

CVSS

3.4

Baixa

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-908

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-961587.0 ALT

—

——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.4h CVE-2026-961565.5 MÉD

—

——0Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.4h CVE-2026-961505.6 MÉD

—

——0Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.4h CVE-2026-961444.7 MÉD

—

——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4h CVE-2026-960484.7 MÉD

—

——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4h CVE-2026-960225.6 MÉD

—

——0Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.4h