PT-2026-136599

CVE-2026-121197

Published

2026-11-03

Updated

2026-11-05

Description by

CVSS 3.1

7.4

High

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38

Description An out of bounds read exists in ANGLE, which allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. ANGLE (Almost Native Graphics Layer Engine) is a compatibility layer that allows WebGL content to run on various graphics APIs.

Recommendations Update Google Chrome to version 157.0.8103.38 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Arni Hardarson

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers