Main Vulnerability Database Vulnerabilities #VU159048

Improper privilege management in Google Chromium - CVE-2026-121090

Published: November 4, 2026

Vulnerability identifier: #VU159048

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-121090

CWE-ID: CWE-269

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to potentially gain privileges beyond intended authorization limits in Google Chrome.

The vulnerability exists due to improper privilege management in the Navigation component of Google Chrome when handling navigation operations. A remote attacker can exploit incorrect privilege handling to potentially perform operations outside intended privilege restrictions.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-121090

Install security update from vendor's website.

Google Chromium - update to 157.0.8103.38
Google Chrome - update to 157.0.8103.38

External References

Related Security Bulletins