DEBIAN-CVE-2026-121094: High severity debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker must persuade a user to load a crafted HTML page. The attack can be delivered remotely and does not require the attacker to authenticate or hold prior privileges.
2
What is the impact if exploitation succeeds?
Successful exploitation allows arbitrary code execution inside the Chromium sandbox. The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability.
3
Which Debian Chromium versions are affected?
The issue affects Google Chrome versions prior to 157.0.8103.38, but the provided data does not identify the corresponding Debian Chromium package versions or fixed Debian releases.