Skip to content
NewA calmer, faster ZeroHour
Vulnerability1 · 1 read

CVE-2026-121203

Use-after-free in Google Chrome prior to 157.0.8103.38

CVSS 3.1
8.8 high
EPSS
—
Published
·
Modified
Analyze CVE-2026-121203 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

A use-after-free flaw in the Geometry component of Google Chrome allows remote attackers to execute arbitrary code in the sandbox. It is triggered when users visit a crafted HTML page. All users of affected Chrome versions are at risk.

What to do: Upgrade Chrome to 157.0.8103.38 or later. Apply Google's update for CVE-2026-121203.

ProductAffectedFixed in
Google Chromeprior to 157.0.8103.38157.0.8103.38
Estimated exposure
largeNo basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vendors
google
Products
chrome
Weakness
CWE-416
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

2 stories