Live › vulnerability › CVE-2026-121164
Google Chrome on macOS prior to 157.0.8103.38 has an authorization flaw in its Views component. A remote attacker who tricks a user into opening a crafted HTML page can bypass some system access restrictions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Any Mac running Google Chrome older than 157.0.8103.38 is exposed when a user visits a crafted HTML page. Machines that do not run Chrome on macOS are not affected. The sources do not describe further configuration conditions.
No product ranges from the sources yet.
google-chrome --version on Linux; on macOS, check Chrome > About Google Chrome.157.0.8103.38.157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121164")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.