Critical
9.6
Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...
CVE-2026-121257
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Chrome |
≥ 157.0.8103.38, < 157.0.8103.38 |
157.0.8103.38 |
Fix status by distribution
Fixed packages published by each distribution for this CVE Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2026-121257 chromium
Original description The description as published by the source.
Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- patch chrome-cve-admin@google.com
- REDHAT Red Hat
- web chrome-cve-admin@google.com
- web nvd.nist.gov
- web github.com