Skip to content

CVE record · 2 sources

CVE-2026-121038

Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

Vendor: Google
Product: Chrome
EPSS: 0.005 (p40)
Weakness: CWE-200
Exposure class: Browser

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

33

Chrome release Chrome Releases 6d ago

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 157.0.8103.38 (Linux) 157.0.8103.38/.39 Windows/Mac…

CVE-2026-121156 CVE-2026-121229 CVE-2026-121246+57 more Google
13

CVE NVD 6d ago

Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-121038 Google