Live › vulnerability › CVE-2026-121235
A flaw in the Paint component of Google Chrome lets a crafted HTML page make the browser reveal sensitive information. Chromium rates it low severity, and the fix is in Chrome 157.0.8103.38.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone running Google Chrome older than 157.0.8103.38 who browses untrusted web pages. Managed fleets should check the Chrome version across endpoints; the sources do not describe any special configuration needed.
No product ranges from the sources yet.
google-chrome --version157.0.8103.38157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-121235")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.