Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🆕 New CVEs Google Chrome 157.0.8103.38 fixes 8 high-severity CVEs Worst: sandbox escape in DevTools via incorrect authorization (CVE-2026-121030) Patch → 157.0.8103.38 https://cve.now/CVE-2026-121030?release=CVE-2026-121077,CVE-2026-121200,CVE-2026-121202,CVE-2026-121234,CVE-2026-121219,CVE-2026-121230,CVE-2026-121256&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - | |
| App | chrome | - | - | - |