Live › vulnerability › CVE-2026-121045
Chrome on Mac before 157.0.8103.38 let a remote attacker use a crafted HTML page, combined with social engineering, to make browser UI elements appear spoofed. The description rates it Low under Chromium's security severity scale.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Mac installs of Google Chrome before 157.0.8103.38 are affected. The attack needs a user to visit a crafted page that tricks them, so any Mac user browsing the web can be exposed. Organizations can rely on managed Chrome update policies to confirm fleet versions.
No product ranges from the sources yet.
google-chrome --version on managed Macs157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-121045")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.