Live › vulnerability › CVE-2026-121081
A UI misrepresentation flaw in the Passwords feature of Google Chrome, fixed in 157.0.8103.38, lets a remote attacker use social engineering and crafted network traffic to obtain sensitive information. Chromium rates it Low severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone running Google Chrome before 157.0.8103.38 who uses the built-in Passwords feature. Exploitation requires the user to be tricked into the attack, so the browser on end-user machines is the exposed system. Chrome installs that auto-update to a fixed build are not exposed once updated.
No product ranges from the sources yet.
157.0.8103.38.157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain sensitive information via crafted network traffic. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-121081")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.