{"id":"CVE-2026-121233","kind":"vulnerability","aliases":["CVE-2026-121233"],"related":[],"title":"Chrome: CacheStorage type confusion lets a web page run code","description":"Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"A type confusion bug in Chrome's CacheStorage lets a crafted HTML page make the browser run attacker code inside the sandbox. Chromium rates the flaw High severity.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","chrome","desktop","runtime"],"not_affected_if":["chrome-updated","non-chrome-browser"],"how_to_check":"- Open Chrome's version via `chrome://settings/help` and compare against the fixed version\n- Confirm the installed version is at least `157.0.8103.38`","fix":"- Google Chrome: `157.0.8103.38` or later","status":"open","published_at":"2026-11-03T21:17:33+00:00","first_seen_at":"2026-11-03T21:19:28+00:00","triaged_at":"2026-11-03T21:21:17+00:00","updated_at":"2026-11-03T21:21:17+00:00","category":"runtime","confidence":0.8,"triage":{"at":"2026-11-03T21:21:17Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome: `157.0.8103.38` or later","reach":"internet","title":"Chrome: CacheStorage type confusion lets a web page run code","impact":"high","summary":"A type confusion bug in Chrome's CacheStorage lets a crafted HTML page make the browser run attacker code inside the sandbox. Chromium rates the flaw High severity.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["chrome","browsers","desktop"],"confidence":0.8,"fix_status":"available","needs_auth":"no","worst_case":"Attacker code runs inside the Chrome sandbox after a visit","analyst_note":"","how_to_check":"- Open Chrome's version via `chrome://settings/help` and compare against the fixed version\n- Confirm the installed version is at least `157.0.8103.38`","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: Chrome menu > Help > About Google Chrome.","needs_analyst":false,"not_affected_if":["chrome-updated","non-chrome-browser"],"who_is_affected":"Anyone running Google Chrome before 157.0.8103.38 who visits a malicious or compromised web page is exposed. Chromium-based browsers that pick up the same CacheStorage code may also be affected, and their vendors must ship their own fixes. Systems that skip the browser on servers are not affected by this flaw.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000675,"input_tokens":4103,"output_tokens":530,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121233':13A,16A '-2026':12A,15A '157.0.8103.38':58C 'allow':59C 'arbitrari':65C 'attack':38B,62C 'browser':17B,36B 'bug':24B 'cachestorag':2A,28B,52C 'chrome':1A,18B,26B,55C 'chromium':43B,75C 'code':10A,39B,66C 'confus':4A,23B,50C 'craft':31B,72C 'cve':11A,14A 'desktop':19B 'execut':64C 'flaw':46B 'googl':54C 'high':47B,78C 'html':32B,73C 'insid':40B,67C 'let':5A,29B 'make':34B 'page':8A,33B,74C 'prior':56C 'rate':44B 'remot':61C 'run':9A,37B 'runtim':20B 'sandbox':42B,69C 'secur':76C 'sever':48B,77C 'type':3A,22B,49C 'via':70C 'web':7A","nicknames":[],"mitigations":[],"who_affected":"Anyone running Google Chrome before 157.0.8103.38 who visits a malicious or compromised web page is exposed. Chromium-based browsers that pick up the same CacheStorage code may also be affected, and their vendors must ship their own fixes. Systems that skip the browser on servers are not affected by this flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome to version 157.0.8103.38 or later: Chrome menu > Help > About Google Chrome.","pkeys":[],"ptokens":[],"labels":["browsers","chrome","desktop","high","runtime"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:33+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121233","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121233","severity":null,"published_at":"2026-11-03T21:17:33+00:00","modified_at":"2026-11-03T21:17:33+00:00","first_seen_at":"2026-11-03T21:19:28+00:00","fetched_at":"2026-11-03T21:19:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}