Improper State Validation in Google Chrome by Google
CVE-2026-121054

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
3 November 2026

What is CVE-2026-121054?

A flaw exists in Google Chrome prior to version 157.0.8103.38 due to improper state validation in XML. This vulnerability allows remote attackers to exploit this issue by creating a specially crafted HTML page, which can bypass the web origin policy. As a result, this can lead to unauthorized access or manipulation of web resources, making users susceptible to various security risks.

Affected Version(s)

Chrome 157.0.8103.38

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.