{"id":"CVE-2026-121089","kind":"vulnerability","aliases":["CVE-2026-121089"],"related":[],"title":"Chrome: WebGPU use-after-free lets a crafted web page run code","description":"Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"A use-after-free bug in the WebGPU component of Google Chrome, before 157.0.8103.38, can be triggered by a crafted HTML page. Per the description, a remote attacker could potentially execute arbitrary code outside the browser sandbox.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","desktop","runtime","webgpu"],"not_affected_if":["up-to-date-chrome"],"how_to_check":"- Open Chrome and check the version under Settings > About Chrome, or run `chrome://version` in the address bar.\n- Compare the installed version against `157.0.8103.38`.","fix":"- Google Chrome: move to `157.0.8103.38` or later.","status":"open","published_at":"2026-11-03T21:17:14+00:00","first_seen_at":"2026-11-03T21:19:12+00:00","triaged_at":"2026-11-03T21:25:32+00:00","updated_at":"2026-11-03T21:25:32+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-11-03T21:25:32Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome: move to `157.0.8103.38` or later.","reach":"internet","title":"Chrome: WebGPU use-after-free lets a crafted web page run code","impact":"high","summary":"A use-after-free bug in the WebGPU component of Google Chrome, before 157.0.8103.38, can be triggered by a crafted HTML page. Per the description, a remote attacker could potentially execute arbitrary code outside the browser sandbox.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["chrome","browsers","desktop","webgpu"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Remote code runs outside the browser sandbox on the visitor's device","analyst_note":"Confirm whether WebGPU must be enabled by default and whether any exploitation has been reported, using the NVD entry and Chrome Releases notes.","how_to_check":"- Open Chrome and check the version under Settings > About Chrome, or run `chrome://version` in the address bar.\n- Compare the installed version against `157.0.8103.38`.","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: Settings > About Chrome.","needs_analyst":true,"not_affected_if":["up-to-date-chrome"],"who_is_affected":"Anyone running Google Chrome older than 157.0.8103.38 who visits a malicious or compromised web page. The exposure is in the browser on the user's device, so managed fleets should check the Chrome version on each machine. Users on current Chrome builds are not exposed.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000705,"input_tokens":4105,"output_tokens":590,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121089':16A,19A '-2026':15A,18A '157.0.8103.38':39B,73C 'allow':74C 'arbitrari':57B,81C 'attack':53B,77C 'browser':20B,61B 'bug':30B 'chrome':1A,21B,37B,70C 'chromium':91C 'code':13A,58B,82C 'compon':34B 'could':54B 'craft':9A,45B,88C 'cve':14A,17A 'descript':50B 'desktop':22B 'execut':56B,80C 'free':6A,29B,65C 'googl':36B,69C 'high':94C 'html':46B,89C 'let':7A 'outsid':59B,83C 'page':11A,47B,90C 'per':48B 'potenti':55B,79C 'prior':71C 'remot':52B,76C 'run':12A 'runtim':23B 'sandbox':62B,85C 'secur':92C 'sever':93C 'trigger':42B 'use':4A,27B,63C 'use-after-fre':3A,26B 'via':86C 'web':10A 'webgpu':2A,24B,33B,67C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome older than 157.0.8103.38 who visits a malicious or compromised web page. The exposure is in the browser on the user's device, so managed fleets should check the Chrome version on each machine. Users on current Chrome builds are not exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: Settings > About Chrome.","pkeys":[],"ptokens":[],"labels":["browsers","chrome","desktop","high","runtime","webgpu"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121089","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121089","severity":null,"published_at":"2026-11-03T21:17:14+00:00","modified_at":"2026-11-03T21:17:14+00:00","first_seen_at":"2026-11-03T21:19:12+00:00","fetched_at":"2026-11-03T21:19:12+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}