Authorization Bypass in Google Chrome - Affected by Social Engineering
CVE-2026-121169
Currently unrated
What is CVE-2026-121169?
A vulnerability exists in Google Chrome before version 157.0.8103.38 that enables remote attackers to exploit missing authorization in the DevTools. By leveraging social engineering techniques, a crafted Chrome extension can bypass the web origin policy, potentially compromising user data and security. Users are advised to update to the latest version to mitigate the risks associated with this vulnerability.
Affected Version(s)
Chrome 157.0.8103.38