Live › vulnerability › CVE-2026-121216
A flaw in Chrome's user interface lets a remote attacker spoof UI elements by serving a crafted HTML page, combined with social engineering. The sources do not state a direct code execution or data theft outcome.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone running Google Chrome before 157.0.8103.38 who visits a page an attacker has crafted and can be tricked into opening it. Servers and applications that do not run a desktop browser are not exposed through this flaw.
No product ranges from the sources yet.
chrome://version157.0.8103.38157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121216")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.