CVE-2026-121038 | Google Chrome up to 156.0.8078.79 Compositing cross-domain policy

November 3, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Google Chrome. The affected element is an unknown function of the component Compositing. Such manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is traded as CVE-2026-121038. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More