Live › vulnerability › CVE-2026-121199
Chrome's Chromoting remote-desktop component on Mac lacks an authorization check before versions prior to 157.0.8103.38. A local program on the same machine can obtain sensitive information.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Mac machines running Google Chrome older than 157.0.8103.38 are exposed, mainly where Chrome Remote Desktop (Chromoting) is used. The attacker must already run a program on the same machine, so the risk is local. Machines with current Chrome or without Mac Chrome can skip it.
No product ranges from the sources yet.
google-chrome --version on Linux; Mac users check Chrome > About Google Chrome.157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121199")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.