PT-2026-136547
CVE-2026-121131
·
Published
2026-11-03
·
Updated
2026-11-05
Description by
CVSS 3.1
9.6
CriticalMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 157.0.8103.38
Description
A use after free issue in the Mobile component allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extension. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.
Recommendations
Update to version 157.0.8103.38 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾