CVE-2026-121170

The record

Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Affected packages

Related vulnerabilities

• CVE-2026-62848 Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. CWE-913
• CVE-2026-118538 A vulnerability was determined in a2ui-project a2ui up to 0.12.0. CWE-913
• CVE-2026-116612 A flaw was found in GStreamer Editing Services (gst-editing-services). CWE-913
• CVE-2026-92953 vm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer… CWE-913
• CVE-2026-92955 vm2 before 3.11.8 contains a sandbox escape vulnerability in NodeVM that allows attackers… CWE-913
• CVE-2026-92946 vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is… CWE-913
• CVE-2026-92935 vm2 is a sandbox for running untrusted Node.js code. CWE-913
• CVE-2026-65181 Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with… CWE-913