ALPINE-CVE-2026-125350: Use After Free
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/libxsltto a version that resolves this vulnerability.Fixed in 1.1.42-r3 - Upgrade
Upgrade
alpine/libxsltto a version that resolves this vulnerability.Fixed in 1.1.43-r4
Event History
Frequently Asked Questions
What interaction is required for exploitation?
An attacker needs a user to load a crafted HTML page. The issue is remotely reachable and requires no attacker privileges.
What level of access could successful exploitation provide?
Successful exploitation could allow arbitrary code execution inside the Chrome sandbox. The supplied severity vector indicates high confidentiality, integrity, and availability impact, with scope unchanged.
Which software is identified as affected in this record?
The record identifies alpine/libxslt. However, the vulnerability description specifically describes Google Chrome prior to 157.0.8103.50, so the provided data does not establish the affected Alpine package version or remediation version.