Live › vulnerability › CVE-2026-121240
Google Chrome before 157.0.8103.38 mishandles input in its Variations feature, which delivers configuration to the browser. A remote attacker sending crafted network traffic can bypass system access restrictions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Any desktop install of Google Chrome older than 157.0.8103.38 is in scope, since the flaw sits in the browser's Variations component and is reached over the network. The sources do not describe a special configuration or a required account. Chromium security severity is rated Low.
No product ranges from the sources yet.
chrome://version in the browser)157.0.8103.38157.0.8103.38Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
This page as .md · .json · in your agent: get_signal("CVE-2026-121240")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.