Patch Forecast
Amber warning
Patch this week.

CVE-2026-121074

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote…

Risk score
63/100
CVSS
9.6 v3.1
Published
3 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is
Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected
See advisory
Fix
Upgrade the product to 157.0.8103.38 or later.
Exploitation
No known exploitation

Why it is Amber

  • CVSS 9.6 critical
  • Remotely exploitable without logging in

References

Original description

Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Last activity 3 Nov 2026. Patch Forecast updates every hour.