DEBIAN-CVE-2026-119262: Input Validation

Published Oct 30, 2026

Updated

Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

3 affected components

debian/chromium*

Event History

Oct 30, 2026

CVE Published

via OSV·01:16 AM

Data Sourced

via OSV·01:16 AM

DescriptionAffected Software

Frequently Asked Questions

What must an attacker do to exploit this issue?

An attacker would need to cause a user to load a crafted HTML page in an affected Chromium browser. The issue may allow arbitrary code execution inside the browser sandbox.

Which Debian software is affected?

The affected software listed is Debian's chromium package. The issue affects Chromium versions prior to 156.0.8078.79.

Does successful exploitation escape the browser sandbox?

The available information states that arbitrary code execution is possible inside the sandbox. It does not state that the vulnerability enables a sandbox escape.

DEBIAN-CVE-2026-119262: Input Validation

Affected Software

Event History

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which Debian software is affected?

Does successful exploitation escape the browser sandbox?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this issue?

Which Debian software is affected?

Does successful exploitation escape the browser sandbox?