Maple Labs

CVE search · CVE-2026-121220

CVE-2026-121220

high 8.1

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
chrome-cve-admin@google.com
Weakness
CWE-863

Severity

VersionScoreVectorSource
CVSS 3.1 high 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References