DEBIAN-CVE-2026-121055: Debian/chromium vulnerability
Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Low)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 157.0.8103.38
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs to get a victim to use a crafted Chrome extension. The issue is described as remotely exploitable through that extension.
Which installations are affected?
Debian Chromium installations using a version prior to 157.0.8103.38 are affected, based on the available information.
What access could exploitation provide?
A successful exploit could bypass system access restrictions. The available data does not specify which restrictions or the resulting level of system access.