[ CVE-2026-121217 · Published 3 Nov 2026 ]

Vulnerability in Google Chrome

CVSS 7.5 EPSS <1%2 agency advisoriesNo fix listed yet

[ Description ]Official description

Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Low)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1450

    Multiple vulnerabilities in Google Chrome Translated from French

    Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

    CVE-2026-121112CVE-2026-121252CVE-2026-121163+210 more CVEs
  • BSI CERT-BundWID-SEC-2026-4303

    Google Chrome: Multiple vulnerabilities Translated from German

    CVE-2026-121080CVE-2026-121241CVE-2026-121120+210 more CVEs