Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
The list reaches beyond those components: CVE-2026-121035 is a critical use-after-free in Prerender. CVE-2026-121082 is high-severity type confusion in V8. I wouldn't use a site's lack of WebGL as a reason to defer this update.
🆕 New CVEs Google Chrome 157.0.8103.38 fixes 20 high-severity CVEs Worst: remote code execution outside the sandbox in FileSystem API (CVE-2026-121071) Patch → 157.0.8103.38 https://cve.now/CVE-2026-121071?release=CVE-2026-121074,CVE-2026-121076,CVE-2026-121078,CVE-2026-121079,CVE-2026-121080,CVE-2026-121082,CVE-2026-121083,CVE-2026-121084,CVE-2026-121086,CVE-2026-121087,CVE-2026-121089,CVE-2026-121090,CVE-2026-121094,CVE-2026-121095,CVE-2026-121097,CVE-2026-121098,CVE-2026-121100,CVE-2026-121104,CVE-2026-121107&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |