NVD security advisoryHigh
High advisory for Use after free in PerformanceAPIs in Goo
CVE-2026-121188 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Use after free in PerformanceAPIs in GooAffected product
Advisory overview
Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
