cyfenced.com →

[ CVE-2026-121257 · Published 3 Nov 2026 ]

Vulnerability in Google Chrome

CVSS 9.6 EPSS <1%2 agency advisoriesNo fix listed yet

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.6

[ Description ]Official description

Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1450

    Multiple vulnerabilities in Google Chrome Translated from French

    Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

    CVE-2026-121112CVE-2026-121252CVE-2026-121163+210 more CVEs
  • BSI CERT-BundWID-SEC-2026-4303

    Google Chrome: Multiple vulnerabilities Translated from German

    CVE-2026-121080CVE-2026-121241CVE-2026-121120+210 more CVEs

[ References ]References