DEBIAN-CVE-2026-119272: Medium severity debian/chromium vulnerability

Published Oct 30, 2026

Updated

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

3 affected components

debian/chromium*

Event History

Oct 30, 2026

CVE Published

via OSV·01:16 AM

Data Sourced

via OSV·01:16 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Users of Debian's chromium package are exposed if they browse to a maliciously crafted HTML page using an affected version prior to 156.0.8078.79.

What does an attacker need to exploit it?

The attacker can be remote and does not need privileges, but the user must interact with a crafted HTML page. Successful exploitation allows reading memory within the browser sandbox.

DEBIAN-CVE-2026-119272: Medium severity debian/chromium vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?