{"id":"CVE-2026-121184","kind":"vulnerability","aliases":["CVE-2026-121184"],"related":[],"title":"Chrome: media out-of-bounds read lets a crafted web page run code","description":"Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","summary":"An out-of-bounds read in Chrome's Media component, fixed in version 157.0.8103.38, lets a remote attacker run arbitrary code inside the browser sandbox via a crafted HTML page. Chromium rates it Medium severity.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","chrome","desktop","runtime"],"not_affected_if":["chrome-updated","non-chrome-browser"],"how_to_check":"- Check the installed Chrome version at chrome://settings/help and compare it with `157.0.8103.38`.","fix":"- Google Chrome: move to `157.0.8103.38` or later.","status":"open","published_at":"2026-11-03T21:17:27+00:00","first_seen_at":"2026-11-03T21:19:25+00:00","triaged_at":"2026-11-03T21:23:05+00:00","updated_at":"2026-11-03T21:23:05+00:00","category":"runtime","confidence":0.8,"triage":{"at":"2026-11-03T21:23:05Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome: move to `157.0.8103.38` or later.","reach":"internet","title":"Chrome: media out-of-bounds read lets a crafted web page run code","impact":"medium","summary":"An out-of-bounds read in Chrome's Media component, fixed in version 157.0.8103.38, lets a remote attacker run arbitrary code inside the browser sandbox via a crafted HTML page. Chromium rates it Medium severity.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["chrome","browser","desktop"],"confidence":0.8,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs code inside the Chrome sandbox after a visit","analyst_note":"","how_to_check":"- Check the installed Chrome version at chrome://settings/help and compare it with `157.0.8103.38`.","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: Chrome menu > Help > About Google Chrome.","needs_analyst":false,"not_affected_if":["chrome-updated","non-chrome-browser"],"who_is_affected":"Anyone running Google Chrome before 157.0.8103.38 who opens a malicious web page is exposed. The attack needs the user to visit the crafted page, and the sources say the code runs only inside the sandbox, which limits what it can reach. Teams that manage browsers on employee machines should confirm their fleet is updated.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000681,"input_tokens":4107,"output_tokens":541,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121184':17A,20A '-2026':16A,19A '157.0.8103.38':39B,72C 'allow':73C 'arbitrari':45B,80C 'attack':43B,76C 'bound':6A,29B,63C 'browser':21B,49B 'chrome':1A,22B,32B,69C 'chromium':56B,90C 'code':14A,46B,81C 'compon':35B 'craft':10A,53B,87C 'cve':15A,18A 'desktop':23B 'execut':79C 'fix':36B 'googl':68C 'html':54B,88C 'insid':47B,82C 'let':8A,40B 'media':2A,34B,66C 'medium':59B,93C 'out-of-bound':3A,26B 'page':12A,55B,89C 'potenti':78C 'prior':70C 'rate':57B 'read':7A,30B,64C 'remot':42B,75C 'run':13A,44B 'runtim':24B 'sandbox':50B,84C 'secur':91C 'sever':60B,92C 'version':38B 'via':51B,85C 'web':11A","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome before 157.0.8103.38 who opens a malicious web page is exposed. The attack needs the user to visit the crafted page, and the sources say the code runs only inside the sandbox, which limits what it can reach. Teams that manage browsers on employee machines should confirm their fleet is updated.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: Chrome menu > Help > About Google Chrome.","pkeys":[],"ptokens":[],"labels":["browser","chrome","desktop","medium","runtime"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:27+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121184","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121184","severity":null,"published_at":"2026-11-03T21:17:27+00:00","modified_at":"2026-11-03T21:17:27+00:00","first_seen_at":"2026-11-03T21:19:25+00:00","fetched_at":"2026-11-03T21:19:25+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}