DEBIAN-CVE-2026-121063: Debian/chromium vulnerability
Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
Affected Software
Event History
Frequently Asked Questions
What prerequisite does an attacker need to exploit this issue?
The attacker must already have compromised the Chromium renderer process. The issue is then exploitable through a crafted HTML page to bypass site isolation.
Which Chromium versions are affected?
The issue affects Google Chrome versions prior to 157.0.8103.38. The provided data does not identify the corresponding Debian Chromium package version or fixed Debian update.
What security boundary can be bypassed?
Successful exploitation can bypass site isolation through incorrect authorization in CacheStorage. This could allow a renderer-process compromise to cross the intended site-isolation boundary.