{"id":"CVE-2026-121099","kind":"vulnerability","aliases":["CVE-2026-121099"],"related":[],"title":"Chrome: PrivateTokens flaw leaks sensitive data via crafted web page","description":"Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)","summary":"Google Chrome versions before 157.0.8103.38 have an information leak in the PrivateTokens feature. A remote attacker can obtain sensitive information by getting a user to load a crafted HTML page.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","endpoints","runtime"],"not_affected_if":["chrome-updated"],"how_to_check":"- Check the installed Chrome version in the browser's About page or with `chrome://version`","fix":"- Google Chrome: `157.0.8103.38` or later","status":"open","published_at":"2026-11-03T21:17:15+00:00","first_seen_at":"2026-11-03T21:19:13+00:00","triaged_at":"2026-11-03T21:25:20+00:00","updated_at":"2026-11-03T21:25:20+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-11-03T21:25:20Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome: `157.0.8103.38` or later","reach":"internet","title":"Chrome: PrivateTokens flaw leaks sensitive data via crafted web page","impact":"low","summary":"Google Chrome versions before 157.0.8103.38 have an information leak in the PrivateTokens feature. A remote attacker can obtain sensitive information by getting a user to load a crafted HTML page.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["chrome","browsers","endpoints"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Sensitive browser information is readable by a remote attacker","analyst_note":"","how_to_check":"- Check the installed Chrome version in the browser's About page or with `chrome://version`\n- unknown for other checks","plain_action":"Update Google Chrome to version 157.0.8103.38 or later and restart the browser.","needs_analyst":false,"not_affected_if":["chrome-updated"],"who_is_affected":"Anyone running Google Chrome before 157.0.8103.38 is exposed when they visit a page an attacker controls. Managed fleets should confirm every browser reports the fixed version. Users on other browsers built on Chromium should check whether their vendor has shipped the same fix.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000656,"input_tokens":4099,"output_tokens":493,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121099':13A,16A '-2026':12A,15A '157.0.8103.38':25B,60C 'allow':61C 'attack':36B,64C 'browser':17B 'chrome':1A,18B,22B,57C 'chromium':74C 'craft':8A,48B,71C 'cve':11A,14A 'data':6A 'endpoint':19B 'featur':33B 'flaw':3A 'get':42B 'googl':21B,56C 'html':49B,72C 'inform':28B,40B,51C,68C 'leak':4A,29B,52C 'load':46B 'medium':77C 'obtain':38B,66C 'page':10A,50B,73C 'prior':58C 'privatetoken':2A,32B,54C 'remot':35B,63C 'runtim':20B 'secur':75C 'sensit':5A,39B,67C 'sever':76C 'user':44B 'version':23B 'via':7A,69C 'web':9A","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome before 157.0.8103.38 is exposed when they visit a page an attacker controls. Managed fleets should confirm every browser reports the fixed version. Users on other browsers built on Chromium should check whether their vendor has shipped the same fix.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome to version 157.0.8103.38 or later and restart the browser.","pkeys":[],"ptokens":[],"labels":["browsers","chrome","endpoints","medium","runtime"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:15+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121099","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121099","severity":null,"published_at":"2026-11-03T21:17:15+00:00","modified_at":"2026-11-03T21:17:16+00:00","first_seen_at":"2026-11-03T21:19:13+00:00","fetched_at":"2026-11-03T21:19:13+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}