{"id":"CVE-2026-121048","published":"2026-11-03T21:17:09.143","lastModified":"2026-11-03T22:19:33.283","description":"Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-367"],"vendors":[],"products":[],"references":[{"url":"https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html","tags":[]},{"url":"https://issues.chromium.org/issues/567169222","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A race condition in Google Chrome's V8 JavaScript engine before version 157.0.8103.38 allowed a remote attacker to escape the sandbox and execute arbitrary code by exploiting a timing vulnerability during concurrent JIT compilation.","exploitability":"Exploitation requires a user to visit a malicious webpage; no authentication or special privileges are needed, but successful exploitation depends on reliably triggering the race condition in a short window.","blast_radius":"Successful exploitation would allow an attacker to run arbitrary code with the same privileges as the compromised Chrome process, potentially leading to full system compromise if combined with further exploits.","remediation":"Upgrade Google Chrome to version 157.0.8103.38 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","sandbox-escape","race-condition","web","browser"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:58:44.033Z"}}