DEBIAN-CVE-2026-121052: Use After Free
Published Nov 3, 2026
·Updated
Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
An attacker does not need privileges or an account. Exploitation requires convincing a user to interact with a crafted HTML page delivered remotely.
2
What is the likely impact if exploitation succeeds?
The attacker may execute arbitrary code inside the browser sandbox. The vulnerability is rated high severity with high confidentiality, integrity, and availability impact.