Improper Resource Exposure in Google Chrome DevTools
CVE-2026-121168

8.8HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
3 November 2026

What is CVE-2026-121168?

A vulnerability in the DevTools component of Google Chrome allows an attacker to expose sensitive resources improperly. By using social engineering techniques, an attacker can exploit this flaw through a specially crafted HTML page to execute arbitrary code within the sandboxed environment. This highlights a security gap that could potentially be leveraged by malicious actors to gain unauthorized access or perform harmful actions on affected systems.

Affected Version(s)

Chrome 157.0.8103.38

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.