Live › vulnerability › CVE-2026-121157
Chrome's Chromoting remote-desktop component had an authorization flaw before version 157.0.8103.38. A local program on the machine can use it to bypass system access restrictions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Machines running Google Chrome before 157.0.8103.38, mainly those where Chrome Remote Desktop (Chromoting) is used. The attacker needs local access and a local program, so servers without local untrusted code are lower risk. Sources do not say whether the flaw depends on a non-default setting.
No product ranges from the sources yet.
chrome://version157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-121157")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.