All security reports
NVD security advisoryHigh

High advisory for Uncontrolled recursion in SVG in Google

CVE-2026-121092 · Reported 3 Nov 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Uncontrolled recursion in SVG in GoogleAffected product

Advisory overview

Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially | Security report | Cevnitra