DEBIAN-CVE-2026-121106: Debian/chromium vulnerability
Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information via UI Interaction. (Chromium security severity: Medium)
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
A remote attacker must induce UI interaction in Chrome on Android. The available information does not describe any purely passive or network-only exploitation path.
Which environments are identified as affected?
The issue is identified in Google Chrome on Android before version 157.0.8103.38. The listed affected software entry is Debian chromium, but the supplied data does not specify Debian package versions or configurations.
What should teams do if they cannot patch immediately?
The provided information does not include a documented workaround or mitigation. Since exploitation requires UI interaction, reducing exposure to untrusted prompts or attacker-controlled content may be operationally relevant, but no specific compensating control is stated in the data.