DEBIAN-CVE-2026-121078: High severity debian/chromium vulnerability
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must persuade a user to load a crafted HTML page. The attack can be delivered remotely and does not require the attacker to have prior privileges.
What is the impact if exploitation succeeds?
The flaw may allow arbitrary code execution within the Chromium sandbox. The reported severity vector indicates potential high impact to confidentiality, integrity, and availability.
Which versions are affected?
Google Chrome versions before 157.0.8103.38 are affected according to the vulnerability description. The provided data identifies Debian's chromium package but does not specify the Debian package version containing the fix.