Skip to content

CVE record · 1 source

CVE-2026-121076

CVSS 9.6

Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code…

Vendor: Google
Product: Chrome
CVSS v3.1: 9.6 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness: CWE-416
Exposure class: Browser

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

47

CVE NVD 3h ago

Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code…

Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS 9.6 CVE-2026-121076 Google