CVE-2026-121061

Summary

A use-after-free vulnerability in Chrome's Modularization component allows a remote attacker to execute arbitrary code inside the sandbox by tricking a user into visiting a crafted HTML page.

Exploitability

Exploitation requires social engineering (user interaction) to load a malicious HTML page; no authentication or special privileges are needed.

Blast radius

Successful exploitation could lead to full compromise of the sandboxed Chrome process, enabling data theft, malware installation, or lateral movement within the user's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 157.0.8103.38 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.