Skip to content
NewA calmer, faster ZeroHour

CVE-2026-121229

Memory corruption in ANGLE in Google Chrome on Android before 157.0.8103.38

CVSS 3.1
9.6 critical
EPSS
—
Published
·
Modified
Analyze CVE-2026-121229 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Memory corruption in ANGLE in Google Chrome on Android allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. This affects versions prior to 157.0.8103.38. An attacker can trigger the flaw by convincing a user to visit a crafted HTML page, potentially leading to code execution outside the sandbox.

What to do: Upgrade Google Chrome on Android to version 157.0.8103.38 or later.

ProductAffected
Google Chromeprior to 157.0.8103.38
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vendors
google
Products
chrome
Weakness
CWE-119
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

In the news

3 stories