PULSE
EN
FEED
ransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Otherransomfalcon reclama a Buchanan Ingersoll & Rooney PC · US · Professional Servicesransomqilin reclama a Arthur Chapman Kettering Smetak Pikala PA · US · Professional Servicesransomakira reclama a Bison Bag · Retail & E-Commerceransomakira reclama a SK Global Software · KR · Technologyransomakira reclama a Pelham Plastics · Manufacturingransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Otherransomfalcon reclama a Buchanan Ingersoll & Rooney PC · US · Professional Servicesransomqilin reclama a Arthur Chapman Kettering Smetak Pikala PA · US · Professional Servicesransomakira reclama a Bison Bag · Retail & E-Commerceransomakira reclama a SK Global Software · KR · Technologyransomakira reclama a Pelham Plastics · Manufacturing
← Todos los CVEs
CVE Watch3 nov 2026

CVE-2026-121166

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 3 nov 2026 · Última mod.: 3 nov 2026 · CWE-843

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1212338.8 ALT
—
———Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1212288.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1212268.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1212218.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7hCVE-2026-1212188.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)7hCVE-2026-1212108.8 ALT
—
———Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)7h