CVE-2026-121202

Summary

A use-after-free vulnerability in Chrome's Autofill feature allows a remote attacker to potentially execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page.

Exploitability

Exploitation requires social engineering to lure the victim to a malicious page and likely depends on precise memory conditions, making it non-trivial but feasible for skilled attackers.

Blast radius

Successful exploitation could lead to full system compromise outside Chrome's sandbox, enabling data theft, malware deployment, or lateral movement within the user's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 157.0.8103.38 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.