DEBIAN-CVE-2026-121039: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which Debian Chromium installations are affected?
Debian Chromium versions prior to 157.0.8103.38 are affected.
2
What access does an attacker need to exploit this issue?
The attacker must be adjacent to the target and able to send crafted network traffic.
3
How can I determine whether a system needs remediation?
Check the installed Debian Chromium version. Systems running a version earlier than 157.0.8103.38 should be updated.