Confused Deputy Vulnerability in Google Chrome WebUI
CVE-2026-121198
Currently unrated
What is CVE-2026-121198?
A vulnerability in the WebUI of Google Chrome versions prior to 157.0.8103.38 creates an opportunity for remote attackers to exploit a confused deputy issue. This flaw enables attackers to bypass established web origin policies through the use of specially crafted HTML pages, leveraging social engineering techniques to manipulate users into interacting with malicious content.
Affected Version(s)
Chrome 157.0.8103.38