CVE-2026-121044

Summary

A use-after-free vulnerability in Chrome's Layout engine allowed remote attackers to execute arbitrary code inside the sandbox by tricking users into visiting a malicious HTML page.

Exploitability

Exploitation requires user interaction (e.g., clicking a link or visiting a crafted page) and is non-trivial due to modern mitigations like ASLR and sandboxing, but the high severity indicates it is feasible for skilled attackers.

Blast radius

Successful exploitation could lead to full compromise of the sandboxed Chrome process, enabling data theft, lateral movement, or further malware deployment within the user's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 157.0.8103.38 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.