DEBIAN-CVE-2026-121053: Debian/chromium vulnerability
UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
The attacker must persuade a user to interact with a crafted HTML page. The issue allows spoofing of UI elements through social engineering rather than requiring local access.
Which users are exposed?
The affected component is described as Google Chrome on Android. The provided Debian software entry is chromium, but the data does not identify specific Debian package versions or configurations.
How can I determine whether I am affected?
Check whether the Chromium or Chrome instance in use is on Android and is earlier than version 157.0.8103.38. The provided data does not include a Debian fixed-package version.