Live › vulnerability › CVE-2026-121143
Google Chrome before 157.0.8103.38 has an uninitialized resource bug in its GPU component. A remote attacker who already controls the renderer process can use a crafted HTML page to read memory outside the sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Desktop and mobile Chrome installs before 157.0.8103.38 are affected. The attack needs a renderer compromise first, so it is chained with another flaw; sources do not say which, so unknown for chained details.
No product ranges from the sources yet.
chrome://version157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-121143")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.