{"id":"CVE-2026-121057","kind":"vulnerability","aliases":["CVE-2026-121057"],"related":[],"title":"Chrome: V8 type confusion lets a crafted web page run code","description":"Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"A type confusion bug in the V8 JavaScript engine of Google Chrome, before 157.0.8103.38, lets a remote attacker run arbitrary code inside the browser sandbox via a crafted HTML page. Chromium rates it High severity.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","desktop","other","v8"],"not_affected_if":["chrome-at-or-above-157.0.8103.38"],"how_to_check":"- Open Chrome's About page (chrome://settings/help) and read the installed version\n- Compare it with `157.0.8103.38`; anything older is in range","fix":"- Google Chrome: move to `157.0.8103.38` or later","status":"open","published_at":"2026-11-03T21:17:10+00:00","first_seen_at":"2026-11-03T21:19:10+00:00","triaged_at":"2026-11-03T21:27:10+00:00","updated_at":"2026-11-03T21:27:10+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-03T21:27:10Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome: move to `157.0.8103.38` or later","reach":"internet","title":"Chrome: V8 type confusion lets a crafted web page run code","impact":"high","summary":"A type confusion bug in the V8 JavaScript engine of Google Chrome, before 157.0.8103.38, lets a remote attacker run arbitrary code inside the browser sandbox via a crafted HTML page. Chromium rates it High severity.","audience":"everyone","category":"other","nicknames":[],"who_cares":["chrome","browsers","v8","desktop"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs code inside the browser sandbox after visiting a page","analyst_note":"Check the Chrome stable release notes for 157.0.8103.38 to confirm the fixed version and whether a sandbox escape is also needed.","how_to_check":"- Open Chrome's About page (chrome://settings/help) and read the installed version\n- Compare it with `157.0.8103.38`; anything older is in range","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: open chrome://settings/help and let it restart.","needs_analyst":true,"not_affected_if":["chrome-at-or-above-157.0.8103.38"],"who_is_affected":"Anyone running Google Chrome older than 157.0.8103.38 is exposed, because a malicious web page alone can trigger the flaw without any login. Chromium-based browsers that pull from the same V8 code may also be affected, but the sources only name Chrome. Teams that do not use desktop Chrome on managed machines can skip this.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000713,"input_tokens":4103,"output_tokens":606,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121057':14A,17A '-2026':13A,16A '157.0.8103.38':36B,67C 'allow':68C 'arbitrari':42B,74C 'attack':40B,71C 'browser':18B,46B 'bug':26B 'chrome':1A,19B,34B,64C 'chromium':53B,84C 'code':11A,43B,75C 'confus':4A,25B,59C 'craft':7A,50B,81C 'cve':12A,15A 'desktop':20B 'engin':31B 'execut':73C 'googl':33B,63C 'high':56B,87C 'html':51B,82C 'insid':44B,76C 'javascript':30B 'let':5A,37B 'page':9A,52B,83C 'prior':65C 'rate':54B 'remot':39B,70C 'run':10A,41B 'sandbox':47B,78C 'secur':85C 'sever':57B,86C 'type':3A,24B,58C 'v8':2A,22B,29B,61C 'via':48B,79C 'web':8A","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome older than 157.0.8103.38 is exposed, because a malicious web page alone can trigger the flaw without any login. Chromium-based browsers that pull from the same V8 code may also be affected, but the sources only name Chrome. Teams that do not use desktop Chrome on managed machines can skip this.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: open chrome://settings/help and let it restart.","pkeys":[],"ptokens":[],"labels":["browsers","chrome","desktop","high","other","v8"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:10+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121057","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121057","severity":null,"published_at":"2026-11-03T21:17:10+00:00","modified_at":"2026-11-03T21:17:10+00:00","first_seen_at":"2026-11-03T21:19:10+00:00","fetched_at":"2026-11-03T21:19:10+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}