DEBIAN-CVE-2026-118319: Medium severity debian/chromium vulnerability

Q: What does exploitation require from an attacker?

The attacker can be remote and does not require privileges, but exploitation requires user interaction with a crafted HTML page.

Q: Which Debian packages should be reviewed for exposure?

The affected software listed for this issue is debian/chromium and debian/libskia. The provided data does not specify Debian package versions or fixed versions.

Published Oct 27, 2026

Updated

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

4 affected componentsFixes available

debian/chromium*

debian/chromium<156.0.8078.73-1~deb13u1

156.0.8078.73-1~deb13u1

debian/chromium*

debian/libskia*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 156.0.8078.73-1~deb13u1

Event History

Oct 27, 2026

CVE Published

via OSV·11:17 PM

Data Sourced

via OSV·11:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What does exploitation require from an attacker?

The attacker can be remote and does not require privileges, but exploitation requires user interaction with a crafted HTML page.

Which Debian packages should be reviewed for exposure?

The affected software listed for this issue is debian/chromium and debian/libskia. The provided data does not specify Debian package versions or fixed versions.

DEBIAN-CVE-2026-118319: Medium severity debian/chromium vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What does exploitation require from an attacker?

Which Debian packages should be reviewed for exposure?

Company

Resources

Contact

Frequently Asked Questions

What does exploitation require from an attacker?

Which Debian packages should be reviewed for exposure?