Security November 2026 Latest record Chromium CVE-2026-119263: Memory corruption Recorded 13 Nov 2026 at 12:10 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record .
CVE Microsoft Security Response Center
Chromium CVE-2026-119263: Memory corruption This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
What it said
CVE CVE-2026-119263
Severity Important
CVSS base score 9.6
CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Impact Not stated
Exploitation detected Unknown: not stated by MSRC
Publicly disclosed Unknown: not stated by MSRC
Exploitability Not assessed
Component Microsoft Edge (Chromium-based)
Weakness CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Issued by Chrome
Customer action Required: follow the MSRC remediation guidance
Affected products Microsoft Edge (Chromium-based)
Updates that fix it No KB listed
CISA KEV Not listed in the collected catalog
EPSS No EPSS score collected
Public detection template No Nuclei template listed
Published 4 Nov 2026 08:00 UTC
Last revised 4 Nov 2026 08:00 UTC
Revision note Information published.
Source evidence when recorded
Microsoft security releases Complete at observationRead 13 Nov 2026 at 12:08 UTC
CISA KEV Complete at observationRead 13 Nov 2026 at 12:08 UTC
FIRST EPSS Complete at observationRead 13 Nov 2026 at 12:08 UTC
Public detection templates (Nuclei) Complete at observationRead 13 Nov 2026 at 12:08 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
13 Nov 2026 · 12:10:20 UTC Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
13 Nov 2026 · 11:07:20 UTC Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
6 Nov 2026 · 17:32:22 UTC Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
6 Nov 2026 · 16:31:02 UTC Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this version Field-level log (16)
Up to 100 recent field edits are shown; older edits may be outside retention.
13 Nov 2026 · 12:10:20 UTC
Public detection template Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed 13 Nov 2026 · 12:10:20 UTC
Source coverage: public-exploit-code Incomplete → Current 13 Nov 2026 · 12:10:20 UTC
Source coverage: first-epss Incomplete → Current 13 Nov 2026 · 12:10:20 UTC
Source coverage: msrc-cvrf Incomplete → Current 13 Nov 2026 · 11:07:20 UTC
Public detection template No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained 13 Nov 2026 · 11:07:20 UTC
Source coverage: public-exploit-code Current → Incomplete 13 Nov 2026 · 11:07:20 UTC
Source coverage: first-epss Current → Incomplete 13 Nov 2026 · 11:07:20 UTC
Source coverage: msrc-cvrf Current → Incomplete 6 Nov 2026 · 17:32:22 UTC
Public detection template Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed 6 Nov 2026 · 17:32:22 UTC
Source coverage: public-exploit-code Incomplete → Current 6 Nov 2026 · 17:32:22 UTC
Source coverage: first-epss Incomplete → Current 6 Nov 2026 · 17:32:22 UTC
Source coverage: msrc-cvrf Incomplete → Current 6 Nov 2026 · 16:31:02 UTC
Public detection template No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained 6 Nov 2026 · 16:31:02 UTC
Source coverage: public-exploit-code Current → Incomplete 6 Nov 2026 · 16:31:02 UTC
Source coverage: first-epss Current → Incomplete 6 Nov 2026 · 16:31:02 UTC
Source coverage: msrc-cvrf Current → Incomplete