Skip to content

Vulnerabilities of Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-121085 Incorrect authorization in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system… Not rated Nov 3, 2026
CVE-2026-121130 Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive… 5.3 Medium Nov 3, 2026
CVE-2026-121121 UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI… 5.4 Medium Nov 3, 2026
CVE-2026-121159 Incorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… Not rated Nov 3, 2026
CVE-2026-121204 Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin… 8.8 High Nov 3, 2026
CVE-2026-121251 Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin… 8.8 High Nov 3, 2026
CVE-2026-121172 Incorrect authorization in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI… 5.4 Medium Nov 3, 2026
CVE-2026-121165 UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker… 5.4 Medium Nov 3, 2026
CVE-2026-121189 Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code… 9.6 Critical Nov 3, 2026
CVE-2026-121206 UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 5.4 Medium Nov 3, 2026
CVE-2026-121253 Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… Not rated Nov 3, 2026
CVE-2026-121101 Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… Not rated Nov 3, 2026
CVE-2026-121111 Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access… Not rated Nov 3, 2026
CVE-2026-121055 Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access… Not rated Nov 3, 2026
CVE-2026-121138 Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain… 6.5 Medium Nov 3, 2026
CVE-2026-121236 Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web… 8.8 High Nov 3, 2026
CVE-2026-121043 UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 5.4 Medium Nov 3, 2026
CVE-2026-121157 Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass… Not rated Nov 3, 2026
CVE-2026-121168 Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… 8.8 High Nov 3, 2026
CVE-2026-121235 Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive… 6.5 Medium Nov 3, 2026
CVE-2026-121252 Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin… 8.8 High Nov 3, 2026
CVE-2026-121046 Incorrect authorization in WebAppInstalls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… Not rated Nov 3, 2026
CVE-2026-121053 UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote… 5.4 Medium Nov 3, 2026
CVE-2026-121125 Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had… 5.3 Medium Nov 3, 2026
CVE-2026-121190 UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… Not rated Nov 3, 2026

Other Google products