Authorization Flaw in Google Chrome Affects Web Origin Policy
CVE-2026-121195

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 3 November 2026

What is CVE-2026-121195?

An authorization flaw in Google Chrome allows remote attackers to exploit incorrect handling of TrustedTypes, potentially bypassing web origin policies using specially crafted HTML pages. This vulnerability highlights the importance of thorough input validation and secure coding practices to mitigate risks associated with unauthorized access and data manipulation.

Affected Version(s)

Chrome 157.0.8103.38

References

https://chromereleases.googleblog.com/2026/11/stable-chan...

https://issues.chromium.org/issues/571784617

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 3, 2026
Vulnerability Reserved
Nov 3, 2026

CVE-2026-121195 Data

JSON