CVE-2026-121148

Summary

Use-after-free vulnerability in ANGLE (a graphics library used by Chrome) allows a remote attacker to execute arbitrary code outside the sandbox by tricking a user into visiting a malicious HTML page.

Exploitability

Exploitation requires social engineering to诱导 the victim to visit a crafted page; no pre-authentication or special privileges needed, but UI interaction is required.

Blast radius

Successful exploitation leads to full compromise of the affected Chrome process, potentially enabling data theft, further sandbox escapes, and lateral movement within the user's session.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 157.0.8103.38 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.