Live › vulnerability › CVE-2026-121224
Google Chrome for Mac before 157.0.8103.38 has a flaw where a remote attacker who already compromised the renderer process can run code outside the browser sandbox. The attack is triggered by crafted network traffic.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Mac installs of Chrome before 157.0.8103.38 are exposed. The attack needs a compromised renderer first, so it is a chained attack, not a single-step exploit. Managed fleets that pin Chrome versions should confirm they have moved past the fixed build.
No product ranges from the sources yet.
Google Chrome --version on the Mac157.0.8103.38157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-121224")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.