YR SoftwareYuri Reissaus

← Back to 2026-Nov

Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

? CVE-2026-125350 · score 8.8/10

What could go wrong?

Microsoft fixed a security weakness. Details are limited to avoid helping attackers.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

azl3 libxslt 1.1.43-3 on Azure Linux 3.0

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: no KB article listed. Official page.