{"id":"CVE-2026-121077","kind":"vulnerability","aliases":["CVE-2026-121077"],"related":[],"title":"Chrome for Android: use-after-free lets a crafted page run code","description":"Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","summary":"A use-after-free bug in the mobile version of Google Chrome can be triggered by a crafted HTML page. A remote attacker who tricks a user into visiting that page could potentially run arbitrary code outside the browser sandbox.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","chrome","ios","mobile","package"],"not_affected_if":["chrome-updated","desktop-only"],"how_to_check":"- Open Chrome on the phone and check the version under Settings > About Chrome.\n- Compare the version against `157.0.8103.38`; anything older is in the affected range.","fix":"- Google Chrome (mobile): update to `157.0.8103.38` or later.","status":"open","published_at":"2026-11-03T21:17:12+00:00","first_seen_at":"2026-11-03T21:19:12+00:00","triaged_at":"2026-11-03T21:26:52+00:00","updated_at":"2026-11-03T21:26:52+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-11-03T21:26:52Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome (mobile): update to `157.0.8103.38` or later.","reach":"internet","title":"Chrome for Android: use-after-free lets a crafted page run code","impact":"high","summary":"A use-after-free bug in the mobile version of Google Chrome can be triggered by a crafted HTML page. A remote attacker who tricks a user into visiting that page could potentially run arbitrary code outside the browser sandbox.","audience":"everyone","category":"package","nicknames":[],"who_cares":["chrome","android","ios","mobile"],"confidence":0.7,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs arbitrary code outside the browser sandbox on the device","analyst_note":"","how_to_check":"- Open Chrome on the phone and check the version under Settings > About Chrome.\n- Compare the version against `157.0.8103.38`; anything older is in the affected range.","plain_action":"Update Chrome on your phone to version 157.0.8103.38 or later through the app store.","needs_analyst":false,"not_affected_if":["chrome-updated","desktop-only"],"who_is_affected":"Anyone using Chrome on a mobile device before version 157.0.8103.38 who visits a malicious or compromised web page. Exploitation needs the user to open the attacker's page, which is the social engineering element in the description. Desktop Chrome and other browsers are not covered by this entry.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000677,"input_tokens":4112,"output_tokens":531,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121077':16A,19A '-2026':15A,18A '157.0.8103.38':76C 'allow':77C 'android':3A,20B 'arbitrari':60B,87C 'attack':48B,80C 'browser':64B 'bug':30B 'chrome':1A,21B,37B,73C 'chromium':97C 'code':13A,61B,88C 'could':57B 'craft':10A,43B,94C 'cve':14A,17A 'engin':83C 'execut':86C 'free':7A,29B,68C 'googl':36B,72C 'html':44B,95C 'io':22B 'let':8A 'leverag':81C 'medium':100C 'mobil':23B,33B,70C 'outsid':62B,89C 'packag':24B 'page':11A,45B,56B,96C 'potenti':58B,85C 'prior':74C 'remot':47B,79C 'run':12A,59B 'sandbox':65B,91C 'secur':98C 'sever':99C 'social':82C 'trick':50B 'trigger':40B 'use':5A,27B,66C 'use-after-fre':4A,26B 'user':52B 'version':34B 'via':92C 'visit':54B","nicknames":[],"mitigations":[],"who_affected":"Anyone using Chrome on a mobile device before version 157.0.8103.38 who visits a malicious or compromised web page. Exploitation needs the user to open the attacker's page, which is the social engineering element in the description. Desktop Chrome and other browsers are not covered by this entry.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Chrome on your phone to version 157.0.8103.38 or later through the app store.","pkeys":[],"ptokens":[],"labels":["android","chrome","ios","medium","mobile","package"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:12+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121077","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121077","severity":null,"published_at":"2026-11-03T21:17:12+00:00","modified_at":"2026-11-03T21:17:12+00:00","first_seen_at":"2026-11-03T21:19:12+00:00","fetched_at":"2026-11-03T21:19:12+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}