DEBIAN-CVE-2026-121086: Buffer Overflow
Published Nov 3, 2026
·Updated
Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What would an attacker need to do to exploit this issue?
An attacker would need to get a user to load a crafted HTML page. The attack can be delivered remotely and does not require attacker privileges.
2
What is the potential impact if exploitation succeeds?
Successful exploitation could allow arbitrary code execution outside the Chromium sandbox. The reported impact includes high confidentiality, integrity, and availability effects.
3
Which Chromium versions are affected according to the available information?
The issue affects Google Chrome versions prior to 157.0.8103.38. The supplied data identifies the affected Debian software as chromium but does not provide the corresponding Debian package version.