Microsoft Security Response CenterCVE-2026-125344

Chromium CVE-2026-125344: Type confusion

HighVendor CVSS 8.8 / 10 1 CVE Published Nov 13, 2026 at 8:00 AM UTC

Get alerts for Microsoft Edge (Chromium-based)

Summary

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Products covered

Microsoft Edge (Chromium-based)

Remediation

Release Notes

Vendor-listed fixes

157.0.4341.57

CVEs in this advisory 1

CVE-2026-125344

Updates

Nov 13, 2026 at 8:00 AM UTC
Published by Microsoft Security Response Center
The publication date reported by the vendor.
Nov 14, 2026 at 3:20 AM UTC
Added to SecurityAlert
We collected the advisory from the official source.

Source

Details collected from Microsoft Security Response Center.

Vendor: Microsoft Security Response Center
Advisory ID: CVE-2026-125344
Last source check: Nov 14, 2026 at 3:20 AM UTC

Official bulletin How SecurityAlert builds this record

Your environment

Check the systems you actually run

A vendor advisory can tell you what may be affected. It cannot tell you whether that product and version are installed in your environment.

Confirm the product and installed version.
Read the vendor's prerequisites and exceptions.
Test the update or mitigation through your normal change process.

Watch Microsoft Edge (Chromium-based)

Keep following

Get new Microsoft Security Response Center advisories

Use the vendor-specific RSS feed or set up alerts for a product your team relies on.

Follow this vendor's RSS feed

Summary

Products covered

Remediation

Vendor-listed fixes

CVEs in this advisory 1

Updates

Related advisories from Microsoft Security Response Center

Chromium CVE-2026-126922: Out of bounds read

Chromium CVE-2026-126921: Use after free

Chromium CVE-2026-126920: Information leak

Chromium CVE-2026-126919: Use after free

Chromium CVE-2026-126918: Use after free

Chromium CVE-2026-126917: Memory corruption