PT-2026-136534

CVE-2026-121118

·

Published

2026-11-03

·

Updated

2026-11-05

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38
Description A use after free issue exists in the SVG component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a specially crafted HTML page, allowing the execution of arbitrary code within the sandbox.
Recommendations Update Google Chrome to version 157.0.8103.38 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
OPENSUSE-SU-2026:12426-1
Found an issue in the description? Have something to add? Feel free to write us 👾