Live › vulnerability › CVE-2026-121229
A memory corruption flaw in ANGLE, the graphics layer of Google Chrome on Android, lets a crafted HTML page trigger it. A remote attacker could potentially run arbitrary code outside the browser sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Any Android device running Google Chrome older than 157.0.8103.38 is exposed when a user visits a crafted web page. Exposure does not depend on account login or non-default settings. Devices already on the fixed version or using a different browser's engine are not affected by this flaw.
No product ranges from the sources yet.
chrome://version in the address bar.157.0.8103.38 is listed as affected.157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
This page as .md · .json · in your agent: get_signal("CVE-2026-121229")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.