PT-2026-136615

CVE-2026-121213

Published

2026-11-03

Updated

2026-11-05

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38

Description An uninitialized resource in the Images component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data access occurs when a script or request from one origin attempts to access data from a different origin, which is typically restricted by the Same-Origin Policy.

Recommendations Update Google Chrome to version 157.0.8103.38 or later.

Exploitability

Fix

Impacts

Researchers

Xinyang Ge

Vendors

Affected products

Weakness enumeration

CWE-908: Use of Uninitialized Resource

Related identifiers

CVE-2026-121213