CVE-2026-126902 · Package
NO FIX YET · SEE WHAT TO DO
Google Chrome on macOS has an incorrect reference resolution flaw in its browser component. A remote attacker who has already compromised the renderer process can run arbitrary code outside the sandbox by serving a crafted HTML page.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Mac users running Google Chrome older than 157.0.8103.78. Exploitation requires a renderer compromise first, so the flaw is a sandbox escape that chains with another bug. Systems on other platforms are not named in the source.
Not affected if chrome-updated, non-mac-platform
Who cares browser, chrome, macos
/Applications/Google Chrome.app/Contents/MacOS/Google Chrome --version157.0.8103.78; anything older is in the affected range157.0.8103.78 or laterIncorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.