PT-2026-136557
CVE-2026-121142
·
Published
2026-11-03
·
Updated
2026-11-05
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 157.0.8103.38
Description
Incorrect authorization in the Network component allows a remote attacker to bypass the web origin policy through the use of a crafted Chrome extension, provided the attacker can leverage social engineering.
Recommendations
Update to version 157.0.8103.38 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾