Live › vulnerability › CVE-2026-121254
A flaw in the Select dropdown of Google Chrome lets a crafted HTML page obtain sensitive information from the browser. Chromium rates it Medium severity, and the sources give no further detail on what data is exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 21:19 UTC. All times on this page are UTC.
Anyone running Google Chrome before 157.0.8103.38 who visits a page that an attacker controls or can inject content into. Managed fleets should check the Chrome version on each machine, since the sources do not say which platforms or channels are affected beyond that.
No product ranges from the sources yet.
157.0.8103.38 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
This page as .md · .json · in your agent: get_signal("CVE-2026-121254")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.