CVE-2026-121157

Google Chrome authorization bypass in Chromoting

critical · 9.8

Fix listed

Google Chrome

Published Nov 3, 2026, 20:42 UTC

Description

Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Low)

Reported fixed versions

157.0.8103.38

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.