{"id":"CVE-2026-121241","kind":"vulnerability","aliases":["CVE-2026-121241"],"related":[],"title":"Chrome on Android: use-after-free in navigation lets a web page run code","description":"Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","summary":"A use-after-free bug in the Navigation component of Google Chrome on Android, before version 157.0.8103.38, lets a remote attacker run arbitrary code outside the browser sandbox by serving a crafted HTML page. Chromium rates the flaw High severity.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","chrome","mobile","other"],"not_affected_if":["chrome-updated","ios-only"],"how_to_check":"- Open Chrome on the Android device and check the version under Settings > About Chrome, or run `chrome://version` in the address bar.\n- Confirm the reported version is below `157.0.8103.38`.","fix":"- Google Chrome on Android: move to `157.0.8103.38` or later.","status":"open","published_at":"2026-11-03T21:17:34+00:00","first_seen_at":"2026-11-03T21:19:28+00:00","triaged_at":"2026-11-03T21:21:08+00:00","updated_at":"2026-11-03T21:21:08+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-11-03T21:21:08Z","model":"claude-haiku-5-5","output":{"fix":"- Google Chrome on Android: move to `157.0.8103.38` or later.","reach":"internet","title":"Chrome on Android: use-after-free in navigation lets a web page run code","impact":"high","summary":"A use-after-free bug in the Navigation component of Google Chrome on Android, before version 157.0.8103.38, lets a remote attacker run arbitrary code outside the browser sandbox by serving a crafted HTML page. Chromium rates the flaw High severity.","audience":"everyone","category":"other","nicknames":[],"who_cares":["android","chrome","mobile"],"confidence":0.8,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs code outside the browser sandbox on the phone","analyst_note":"","how_to_check":"- Open Chrome on the Android device and check the version under Settings > About Chrome, or run `chrome://version` in the address bar.\n- Confirm the reported version is below `157.0.8103.38`.","plain_action":"Update Google Chrome on your Android phone to version 157.0.8103.38 or later through the Play Store.","needs_analyst":false,"not_affected_if":["chrome-updated","ios-only"],"who_is_affected":"Any Android device running Google Chrome older than 157.0.8103.38 is exposed, and the attack needs only that the user loads a malicious web page. Managed devices that pin an older Chrome build are the ones most likely to stay exposed. Devices on current Chrome or on iOS are not affected by this entry.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.00069,"input_tokens":4106,"output_tokens":559,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121241':18A,21A '-2026':17A,20A '157.0.8103.38':42B,79C 'allow':80C 'android':3A,22B,39B,76C 'arbitrari':48B,87C 'attack':46B,83C 'browser':52B 'bug':30B 'chrome':1A,23B,37B,73C 'chromium':60B,97C 'code':15A,49B,88C 'compon':34B 'craft':57B,94C 'cve':16A,19A 'execut':86C 'flaw':63B 'free':7A,29B,68C 'googl':36B,72C 'high':64B,100C 'html':58B,95C 'let':10A,43B 'mobil':24B 'navig':9A,33B,70C 'outsid':50B,89C 'page':13A,59B,96C 'potenti':85C 'prior':77C 'rate':61B 'remot':45B,82C 'run':14A,47B 'sandbox':53B,91C 'secur':98C 'serv':55B 'sever':65B,99C 'use':5A,27B,66C 'use-after-fre':4A,26B 'version':41B 'via':92C 'web':12A","nicknames":[],"mitigations":[],"who_affected":"Any Android device running Google Chrome older than 157.0.8103.38 is exposed, and the attack needs only that the user loads a malicious web page. Managed devices that pin an older Chrome build are the ones most likely to stay exposed. Devices on current Chrome or on iOS are not affected by this entry.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Google Chrome on your Android phone to version 157.0.8103.38 or later through the Play Store.","pkeys":[],"ptokens":[],"labels":["android","chrome","high","mobile","other"],"campaign_type":null,"first_public_at":"2026-11-03T21:17:34+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121241","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121241","severity":null,"published_at":"2026-11-03T21:17:34+00:00","modified_at":"2026-11-03T21:17:34+00:00","first_seen_at":"2026-11-03T21:19:28+00:00","fetched_at":"2026-11-03T21:19:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}