Live › vulnerability › CVE-2026-121037
An out-of-bounds write in the ANGLE graphics layer of Google Chrome on Windows lets a remote attacker craft an HTML page that can potentially execute code outside the browser sandbox. Chromium rates the flaw High severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Any Windows computer running Google Chrome before 157.0.8103.38 is exposed, and the trigger is simply a visit to a malicious web page. Chromium browsers built on the same code may need their own updates, which the sources do not state. Machines that do not run Chrome on Windows can skip it.
No product ranges from the sources yet.
157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-121037")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.