DEBIAN-CVE-2026-121090: High severity debian/chromium vulnerability
Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker must first compromise the renderer process and then use a crafted HTML page. The supplied vector also indicates user interaction is required.
What is the potential impact after successful exploitation?
A successful attacker could execute arbitrary code outside the browser sandbox. The reported impact includes high confidentiality, integrity, and availability effects, with scope change.
How can I determine whether my Debian Chromium installation is affected?
The provided data does not include an affected or fixed Debian Chromium package version. It describes the vulnerable product as Google Chrome on iOS before version 157.0.8103.38, so the supplied information alone cannot confirm Debian Chromium exposure.