PT-2026-136570

CVE-2026-121166

Published

2026-11-03

Updated

2026-11-05

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38

Description A type confusion issue exists in PDFium, a PDF rendering engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the application to process a specially crafted PDF file. Type confusion occurs when a program allocates a resource as one type but accesses it as another, leading to memory corruption.

Recommendations Update Google Chrome to version 157.0.8103.38 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')

Related identifiers

CVE-2026-121166