NVD security advisoryHigh
High advisory for Incorrect authorization in Extensions in
CVE-2026-121183 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Incorrect authorization in Extensions inAffected product
Advisory overview
Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)