Live › vulnerability › CVE-2026-121039
Google Chrome's Proxy Auth component has an incorrect authorization check that lets an attacker on the same network segment read sensitive information through crafted network traffic. Chromium rates it Medium severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Chrome desktop users on a network where an attacker can send crafted traffic, most relevant on shared or untrusted networks with proxy authentication in use. Users on fully patched Chrome builds at or above 157.0.8103.38 are not affected. The sources do not describe a default-off feature.
No product ranges from the sources yet.
157.0.8103.38.157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121039")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.