CVE WATCH / VULNERABILITY DETAIL

CVE-2026-121092

HIGHCVSS 8.8NVD feed

Published 3 November 2026 · tracked since 4 November 2026

Description

Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools