DEBIAN-CVE-2026-121077: Use After Free
Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must persuade a user to interact with a crafted HTML page. The issue can then be exploited remotely without prior privileges.
Who is exposed?
Users of Debian Chromium are exposed when they use an affected version and can be induced through social engineering to open or interact with attacker-controlled web content. The reported impact includes potential arbitrary code execution outside the browser sandbox.
Which versions are affected?
The issue affects Google Chrome versions prior to 157.0.8103.38. The provided data does not identify the corresponding fixed Debian Chromium package version.