PT-2026-136632

CVE-2026-121230

Published

2026-11-03

Updated

2026-11-05

Description by

CVSS 3.1

8.3

High

MetricsAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 157.0.8103.38

Description A race condition in ANGLE allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. A race condition occurs when the timing or sequence of events is unplanned, leading to unexpected behavior.

Recommendations Update Google Chrome to version 157.0.8103.38 or later.

Exploitability

Fix

Impacts

Researchers

Hafiizh

Vendors

Affected products

Weakness enumeration

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')

Related identifiers

CVE-2026-121230