CVE-2026-121109
NoneCVSS
—
EPSS
0.1%
Published
Nov 3, 2026
CISA due date
—
The record
Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63286 Database backups are vulnerable to offline attacks. CWE-326
- CVE-2026-116054 A security vulnerability has been detected in SH3. CWE-326
- CVE-2026-114616 Authlib is a Python library which builds OAuth and OpenID Connect servers. CWE-326
- CVE-2026-112026 A security vulnerability has been detected in light0011 cms… CWE-326
- CVE-2026-77405 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-326
- CVE-2026-86670 A flaw has been found in aircheng-org iWebShop-5 up to 5.15. CWE-326
- CVE-2026-17520 The Newsletters WordPress plugin before 4.17 does not generate its API key using a… CWE-326
- CVE-2026-47842 Applications using AesBytesEncryptor with the two-argument constructor or when passing a… CWE-326