CVE-2026-121234

Summary

A privilege elevation flaw in Google Chrome's Contacts feature on Android allowed remote attackers to escape the browser sandbox and execute arbitrary code outside it by tricking a user into visiting a malicious HTML page.

Exploitability

Exploitation requires social engineering (user interaction) to visit a crafted page; no pre-authentication or special privileges are needed beyond a standard web request.

Blast radius

Successful exploitation could lead to full device compromise, including data theft, malware installation, and lateral movement within the user's Android environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome on Android to version 157.0.8103.38 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.