CVE Watch3 de nov. de 2026

CVE-2026-121237

Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to b

CVSS

—

Sem CVSS

EPSS

0.2%

KEV

—

Exploit Today

0-100

Publicado: 3 de nov. de 2026 · Última mod.: 3 de nov. de 2026 · CWE-754

EPSS · 30d

0.2%EPSS · 30 dias0.2%

2026-11-042026-11-06

Descrição técnica

Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-69066—

3.4%

——1Memory corruption in GPU driver due to improper validation of VMID reservation.2d CVE-2026-69006—

3.4%

——1Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.2d CVE-2026-48186—

3.4%

——1Improper handling of messages before AS security activation can cause unexpected behavior2d CVE-2026-35495—

4.2%

——1In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability2d CVE-2025-66368—

4.2%

——1Incorrect handling of SDP payload leads to a Denial of Service2d CVE-2025-66365—

4.2%

——1Incorrect handling of SIP packets leads to baseband crashes2d