DEBIAN-CVE-2026-121081: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain sensitive information via crafted network traffic. (Chromium security severity: Low)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Who is exposed to this issue?
Users of Debian's chromium package running a version earlier than 157.0.8103.38 may be exposed, particularly if they can be persuaded to interact with attacker-crafted network traffic.
2
What does an attacker need to exploit it?
The attacker must deliver crafted network traffic and rely on social engineering. The disclosed impact is obtaining sensitive information through UI misrepresentation in Passwords.