DEBIAN-CVE-2026-121046: Debian/chromium vulnerability
Incorrect authorization in WebAppInstalls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 157.0.8103.38
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
The attacker must persuade a user to interact with a crafted HTML page. The issue is remotely exploitable through social engineering.
What is the security impact?
Successful exploitation can spoof the browser address bar, potentially making a malicious page appear to have a different address.
Which Chromium releases are affected?
The issue affects Google Chrome versions prior to 157.0.8103.38. The provided data identifies the affected Debian software as chromium but does not specify the fixed Debian package version.