Main Vulnerability Database Vulnerabilities #VU159192

Exposure of Resource to Wrong Sphere in Google Chromium - CVE-2026-121168

Published: November 4, 2026

Vulnerability identifier: #VU159192

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-121168

CWE-ID: CWE-668

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to access improperly exposed resources, potentially disclosing information outside intended access boundaries.

The vulnerability exists due to improper resource exposure in Google Chrome DevTools when handling access to resources. A remote attacker can access exposed resources to potentially obtain information that should be restricted.

Affected software

Google Chromium
Google Chrome

How to mitigate CVE-2026-121168

Install security update from vendor's website.

Google Chromium - update to 157.0.8103.38
Google Chrome - update to 157.0.8103.38

External References

Related Security Bulletins