NVD security advisoryCritical
Critical advisory for Use after free in WebXR in Google Chrome
CVE-2026-121076 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Use after free in WebXR in Google ChromeAffected product
Advisory overview
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
