PT-2026-136573
CVE-2026-121169
·
Published
2026-11-03
·
Updated
2026-11-05
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 157.0.8103.38
Description
Missing authorization in DevTools allows a remote attacker to bypass the web origin policy through the use of a crafted Chrome extension, typically requiring social engineering to execute.
Recommendations
Update to version 157.0.8103.38 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾