CVE-2026-125347

Summary

A flaw in Chrome's FileSystem implementation allowed unauthorized access to sensitive file system operations due to insufficient authorization checks, enabling a remote attacker to escape the sandbox and execute arbitrary code on the victim's machine after tricking them into visiting a malicious webpage.

Exploitability

Exploitation requires social engineering to诱导 the user to interact with a crafted HTML page while the vulnerable Chrome version is running; no privilege or prior access is needed beyond user interaction.

Blast radius

Successful exploitation could lead to full system compromise, including data theft, malware installation, and lateral movement, as the attacker gains code execution outside the Chrome sandbox.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 157.0.8103.50 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.