DEBIAN-CVE-2026-121041: Debian/chromium vulnerability

Published Nov 3, 2026

Updated

Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

Affected Software

3 affected components

debian/chromium*

Event History

Nov 3, 2026

CVE Published

via OSV·09:17 PM

Data Sourced

via OSV·09:17 PM

DescriptionAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Users of Debian's chromium package running a version prior to 157.0.8103.38 are exposed when they visit an attacker-controlled or otherwise crafted HTML page.

What does an attacker need to exploit it?

The attacker needs to cause the victim to load a crafted HTML page remotely. The available information does not indicate that prior authentication or local access is required.

What is the impact of successful exploitation?

Successful exploitation can allow a remote attacker to obtain sensitive information through missing authorization in Input.

DEBIAN-CVE-2026-121041: Debian/chromium vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?