Live · 98 sources · updated 22m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-121107

Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a…

Vendor
Google
Product
Chrome
Weakness
CWE-863
Exposure class
Browser

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. Chrome release Chrome Releases

    Stable Channel Update for Desktop

    The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 157.0.8103.38 (Linux) 157.0.8103.38/.39 Windows/Mac…

  2. CVE NVD

    Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a…

    Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help