DEBIAN-CVE-2026-121096: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local program. (Chromium security severity: Medium)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires local access and the ability to run a local program on the affected system. The issue allows that local attacker to read memory.
2
Which Chromium versions are affected?
Google Chrome versions prior to 157.0.8103.38 are affected according to the available advisory data. The listed Debian software package is chromium.
3
What is the immediate mitigation if an update cannot be applied?
The provided data does not identify a configuration workaround. Restricting untrusted users from obtaining local access or executing local programs reduces the stated attack opportunity.