CVE-2026-121037

Summary

An out-of-bounds write vulnerability in ANGLE (a graphics library used by Chrome) on Windows allowed remote attackers to corrupt memory when a user visited a malicious HTML page, potentially leading to arbitrary code execution outside Chrome's sandbox.

Exploitability

Exploitation requires a targeted user to visit a crafted HTML page and relies on social engineering; no pre-authentication or privileged access is needed.

Blast radius

Successful exploitation could lead to full system compromise via sandbox escape, enabling attackers to execute arbitrary code with the victim's privileges.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 157.0.8103.38 or later on Windows systems.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.