{"id":"CVE-2026-121181","kind":"vulnerability","aliases":["CVE-2026-121181"],"related":[],"title":"Chrome: use-after-free in Editing lets a crafted page run code","description":"Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"A use-after-free bug in the Editing component of Google Chrome before 157.0.8103.38 lets a remote attacker run arbitrary code inside the browser sandbox via a crafted HTML page. Chromium rates it High severity.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","desktop","linux","macos","package","windows"],"not_affected_if":["chrome-updated"],"how_to_check":"- Open Chrome, go to the menu, then Help, then About Google Chrome, and read the installed version\n- Check the installed version is at least `157.0.8103.38`","fix":"- Google Chrome: move to `157.0.8103.38` or later","status":"open","published_at":"2026-11-03T21:17:26+00:00","first_seen_at":"2026-11-03T21:19:24+00:00","triaged_at":"2026-11-03T21:23:08+00:00","updated_at":"2026-11-03T21:23:08+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-03T21:23:08Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome: move to `157.0.8103.38` or later","reach":"internet","title":"Chrome: use-after-free in Editing lets a crafted page run code","impact":"high","summary":"A use-after-free bug in the Editing component of Google Chrome before 157.0.8103.38 lets a remote attacker run arbitrary code inside the browser sandbox via a crafted HTML page. Chromium rates it High severity.","audience":"everyone","category":"package","nicknames":[],"who_cares":["chrome","browsers","desktop","windows","macos","linux"],"confidence":0.8,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs code inside the browser sandbox via a crafted page","analyst_note":"","how_to_check":"- Open Chrome, go to the menu, then Help, then About Google Chrome, and read the installed version\n- Check the installed version is at least `157.0.8103.38`","plain_action":"Update Google Chrome to version 157.0.8103.38 or later, then restart the browser.","needs_analyst":false,"not_affected_if":["chrome-updated"],"who_is_affected":"Anyone running Google Chrome before 157.0.8103.38 who visits web pages, including pages that are not trusted. Exposure depends only on the installed Chrome version, not on any special setting. Managed fleets should confirm the installed version across all machines.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000669,"input_tokens":4100,"output_tokens":517,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121181':16A,19A '-2026':15A,18A '157.0.8103.38':41B,73C 'allow':74C 'arbitrari':47B,80C 'attack':45B,77C 'browser':20B,51B 'bug':32B 'chrome':1A,21B,39B,70C 'chromium':58B,90C 'code':13A,48B,81C 'compon':36B 'craft':10A,55B,87C 'cve':14A,17A 'desktop':22B 'edit':7A,35B,67C 'execut':79C 'free':5A,31B,65C 'googl':38B,69C 'high':61B,93C 'html':56B,88C 'insid':49B,82C 'let':8A,42B 'linux':23B 'maco':24B 'packag':25B 'page':11A,57B,89C 'prior':71C 'rate':59B 'remot':44B,76C 'run':12A,46B 'sandbox':52B,84C 'secur':91C 'sever':62B,92C 'use':3A,29B,63C 'use-after-fre':2A,28B 'via':53B,85C 'window':26B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome before 157.0.8103.38 who visits web pages, including pages that are not trusted. Exposure depends only on the installed Chrome version, not on any special setting. Managed fleets should confirm the installed version across all machines.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome to version 157.0.8103.38 or later, then restart the browser.","pkeys":[],"ptokens":[],"labels":["browsers","chrome","desktop","high","linux","macos","package","windows"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:26+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121181","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121181","severity":null,"published_at":"2026-11-03T21:17:26+00:00","modified_at":"2026-11-03T21:17:26+00:00","first_seen_at":"2026-11-03T21:19:24+00:00","fetched_at":"2026-11-03T21:19:24+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}