CVE-2026-121175
NoneCVSS
—
EPSS
0.2%
Published
Nov 3, 2026
CISA due date
—
The record
Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121168 Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a… CWE-668
- CVE-2026-120308 A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. CWE-668
- CVE-2026-115522 Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google Agent… CWE-668
- CVE-2026-57144 PraisonAI is a multi-agent teams system. CWE-668
- CVE-2026-113328 Improper resource exposure in Privacy in Google Chrome prior to 156.0.8078.47 allowed a… CWE-668
- CVE-2026-113126 Improper resource exposure in PolicyContainer in Google Chrome prior to 156.0.8078.47… CWE-668
- CVE-2026-112936 filelock is a platform-independent file lock for Python. CWE-668
- CVE-2026-105754 vLLM is an inference and serving engine for large language models. CWE-668