{"id":"CVE-2026-121050","kind":"vulnerability","aliases":["CVE-2026-121050"],"related":[],"title":"Chrome on iOS: race condition lets crafted web page bypass origin policy","description":"Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)","summary":"A race condition in Chrome's mobile browser on iOS lets a crafted HTML page bypass the web origin policy. An attacker who lures a user to that page can read or act on content from other sites the user has open, within the browser's sandboxed rules.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["chrome","ios","mobile-browser","runtime"],"not_affected_if":["chrome-not-installed","updated-to-157.0.8103.38"],"how_to_check":"- Open Chrome on iOS and check the version under Chrome menu > Settings > About Chrome\n- Confirm whether the installed version is below `157.0.8103.38`","fix":"- Chrome on iOS: update to `157.0.8103.38` or later","status":"open","published_at":"2026-11-03T21:17:09+00:00","first_seen_at":"2026-11-03T21:19:10+00:00","triaged_at":"2026-11-03T21:27:18+00:00","updated_at":"2026-11-03T21:27:18+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-11-03T21:27:18Z","model":"claude-haiku-5-5","output":{"fix":"- Chrome on iOS: update to `157.0.8103.38` or later","reach":"internet","title":"Chrome on iOS: race condition lets crafted web page bypass origin policy","impact":"medium","summary":"A race condition in Chrome's mobile browser on iOS lets a crafted HTML page bypass the web origin policy. An attacker who lures a user to that page can read or act on content from other sites the user has open, within the browser's sandboxed rules.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["chrome","ios","mobile-browser"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Cross-origin data from other sites readable by a malicious page","analyst_note":"","how_to_check":"- Open Chrome on iOS and check the version under Chrome menu > Settings > About Chrome\n- Confirm whether the installed version is below `157.0.8103.38`","plain_action":"Update Chrome on your iPhone to version 157.0.8103.38 or later through the App Store.","needs_analyst":false,"not_affected_if":["chrome-not-installed","updated-to-157.0.8103.38"],"who_is_affected":"Anyone using Chrome on iOS before version 157.0.8103.38 who visits a malicious or compromised web page. Managed fleets of iPhones with Chrome installed are exposed the same way. Devices already on the fixed version, and users of other browsers on iOS, are not affected by this specific flaw.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.000688,"input_tokens":4103,"output_tokens":555,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121050':15A,18A '-2026':14A,17A '157.0.8103.38':85C 'act':57B 'allow':86C 'attack':46B,89C 'browser':23B,32B,69B 'bypass':10A,40B,91C 'chrome':1A,19B,29B,79C 'chromium':100C 'condit':5A,27B,74C 'content':59B 'craft':7A,37B,97C 'cve':13A,16A 'googl':78C 'html':38B,98C 'io':3A,20B,34B,82C 'let':6A,35B 'low':103C 'lure':48B 'mobil':22B,31B,76C 'mobile-brows':21B 'open':66B 'origin':11A,43B,93C 'page':9A,39B,53B,99C 'polici':12A,44B,94C 'prior':83C 'race':4A,26B,73C 'read':55B 'remot':88C 'rule':72B 'runtim':24B 'sandbox':71B 'secur':101C 'sever':102C 'site':62B 'user':50B,64B 'via':95C 'web':8A,42B,92C 'within':67B","nicknames":[],"mitigations":[],"who_affected":"Anyone using Chrome on iOS before version 157.0.8103.38 who visits a malicious or compromised web page. Managed fleets of iPhones with Chrome installed are exposed the same way. Devices already on the fixed version, and users of other browsers on iOS, are not affected by this specific flaw.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Chrome on your iPhone to version 157.0.8103.38 or later through the App Store.","pkeys":[],"ptokens":[],"labels":["chrome","ios","low","mobilebrowser","runtime"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:09+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121050","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121050","severity":null,"published_at":"2026-11-03T21:17:09+00:00","modified_at":"2026-11-03T21:17:09+00:00","first_seen_at":"2026-11-03T21:19:10+00:00","fetched_at":"2026-11-03T21:19:10+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}