Loading vulnerability…
Sandboxed Code Execution in Google Chrome Geometry
CVE-2026-121203 is a use-after-free vulnerability in the Geometry component of Google Chrome before version 157.0.8103.38. A remote attacker can trigger the flaw through a crafted HTML page to execute arbitrary code inside the browser sandbox. Chromium classifies the vulnerability as Critical. The specific vulnerable function and detailed memory-lifetime failure are not disclosed.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits arbitrary code execution within Chrome's sandbox, compromising confidentiality, integrity, and availability within that security boundary. The vulnerability alone does not establish a sandbox escape, elevated operating-system privileges, or complete device compromise.
If you can’t patch tonight, do this now.
No vulnerability-specific workaround is documented. Reduce exposure through URL and DNS filtering and avoidance of untrusted websites and links. Run the browser under a non-administrative account, retain sandboxing, and enable available anti-exploitation protections to limit potential impact. These measures do not replace updating.
Patch, then assume compromise.
Upgrade Google Chrome to version 157.0.8103.38 or later, using the applicable patched platform release, and verify that the running browser has updated. For affected Chainguard Chromium installations, update Chromium and related packages to version 157.0.8103.38-r0 or later. Some distribution packages are identified as having no vendor-provided fix; where no patched package is available, replace the affected installation with a supported, patched browser build.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.