DEBIAN-CVE-2026-121045: Debian/chromium vulnerability
UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker needs to persuade a user to visit a crafted HTML page. The issue relies on social engineering to make spoofed browser UI elements appear credible.
Which environments are identified as affected?
The vulnerability is described for Google Chrome on Mac before version 157.0.8103.38. The listed software entry is debian/chromium, but the provided data does not state which Debian Chromium versions or configurations are affected.
How can exposure be reduced before an update is available?
Avoid opening untrusted or suspicious web pages and treat browser prompts or UI elements on unfamiliar sites with caution. Because exploitation depends on a crafted page and social engineering, user interaction is a required part of the attack scenario.