NVD security advisoryHigh
High advisory for Uncontrolled recursion in SVG in Google
CVE-2026-121092 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Uncontrolled recursion in SVG in GoogleAffected product
Advisory overview
Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
