Live › vulnerability › CVE-2026-121196
Google Chrome on iOS before 157.0.8103.38 has a privilege elevation flaw in its mobile browser. A remote attacker can use a crafted HTML page to bypass system access restrictions and reach a privileged page.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone using Google Chrome on iOS before version 157.0.8103.38 who opens untrusted web pages is exposed. Browsing on managed devices should be checked against the installed Chrome build; the sources do not describe any special configuration needed.
No product ranges from the sources yet.
157.0.8103.38 or later means patched).157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121196")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.