Live › vulnerability › CVE-2026-121105
A flaw in the Network component of Google Chrome before 157.0.8103.38 lets a remote attacker obtain data from other origins through a crafted HTML page. An attacker who lures a user to such a page can read information that should be isolated from it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone running Google Chrome older than 157.0.8103.38 who visits untrusted web pages. Managed browsers that auto-update are likely already patched once the update lands; the risk sits with unpatched desktop installs.
No product ranges from the sources yet.
google-chrome --version on Linux157.0.8103.38157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121105")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.