DEBIAN-CVE-2026-121034: Use After Free
Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What does exploitation require?
An attacker must persuade a user to interact with a crafted HTML page. The attack is remote and does not require attacker privileges.
Which systems are described as affected?
The vulnerability description specifically identifies Google Chrome on Windows before version 157.0.8103.38. Although the listed software is debian/chromium, the provided data does not establish which Debian Chromium versions or configurations are affected.
What is the potential impact of successful exploitation?
Successful exploitation can allow arbitrary code execution outside the browser sandbox. The supplied severity vector indicates high impact to confidentiality, integrity, and availability.