Critical
9.6
Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a...
CVE-2026-121200
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Chrome |
≥ 157.0.8103.38, < 157.0.8103.38 |
157.0.8103.38 |
Fix status by distribution
Fixed packages published by each distribution for this CVE Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2026-121200 chromium
Original description The description as published by the source.
Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- patch chrome-cve-admin@google.com
- REDHAT Red Hat
- web chrome-cve-admin@google.com
- web nvd.nist.gov
- web github.com