Live › vulnerability › CVE-2026-121136
Google Chrome's DevTools component lacks an authorization check, per the NVD description. A remote attacker who uses social engineering and crafted network traffic can bypass system access restrictions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Desktop and mobile users running Google Chrome builds before 157.0.8103.38. The exposure depends on a remote attacker persuading a user to engage, so the browser's own update is the relevant control; the sources do not describe additional configuration requirements.
No product ranges from the sources yet.
chrome://version in the browser, or on the command line google-chrome --version.157.0.8103.38.157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121136")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.