Live › vulnerability › CVE-2026-121249
A buffer overflow in ANGLE, the graphics translation layer in Google Chrome, lets a remote attacker run arbitrary code outside the browser sandbox. The attacker only needs the victim to load a crafted HTML page.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone running Google Chrome before 157.0.8103.38 is exposed, since the flaw is triggered by visiting a crafted page. Managed fleets should check the Chrome version on every endpoint. Chrome installs that have already auto-updated past that version are not affected.
No product ranges from the sources yet.
chrome --version on the machine.157.0.8103.38.157.0.8103.38 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-121249")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.