---
id: "CVE-2026-121219"
kind: "vulnerability"
aliases: ["CVE-2026-121219"]
title: "Chrome: GPU integer overflow lets a compromised renderer escape its sandbox"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["browsers", "chrome", "desktop", "runtime"]
not_affected_if: ["chrome-already-updated"]
published_at: "2026-11-03T21:17:31+00:00"
first_seen_at: "2026-11-03T21:19:27+00:00"
updated_at: "2026-11-03T21:22:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121219", "first_seen_at": "2026-11-03T21:19:27+00:00"}]
---

# Chrome: GPU integer overflow lets a compromised renderer escape its sandbox

An integer overflow in Chrome's GPU component lets an attacker who has already compromised the renderer process potentially run code outside the browser sandbox. The attacker delivers the trigger through a crafted HTML page.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Chrome version in the browser's About page or with `google-chrome --version` on Linux.
- Compare it against the fixed version listed in the sources.

## Fix

- Google Chrome: update to `157.0.8103.38` or later.

## Timeline

- 2026-11-03T21:19:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121219

## From the sources

Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_