Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ CVE-2026-121030 (9.6) ⚠️ Google Chrome before 157.0.8103.38 can be tricked into running code outside its sandbox by a page an attacker gets you to open. Chrome versions before 157.0.8103.38 are affected. Update to 157.0.8103.38 or later. https://t.co/443zZiJBqr
🆕 New CVEs Google Chrome 157.0.8103.38 fixes 8 high-severity CVEs Worst: sandbox escape in DevTools via incorrect authorization (CVE-2026-121030) Patch → 157.0.8103.38 https://cve.now/CVE-2026-121030?release=CVE-2026-121077,CVE-2026-121200,CVE-2026-121202,CVE-2026-121234,CVE-2026-121219,CVE-2026-121230,CVE-2026-121256&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |