DEBIAN-CVE-2026-121111: Debian/chromium vulnerability

Published Nov 3, 2026

Updated

Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

Affected Software

3 affected components

debian/chromium*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 157.0.8103.38

Event History

Nov 3, 2026

CVE Published

via OSV·09:17 PM

Data Sourced

via OSV·09:17 PM

DescriptionAffected Software

Frequently Asked Questions

What must an attacker do to exploit this issue?

An attacker would need to persuade a user to load a crafted HTML page remotely. The issue is an authorization bypass in HID that can bypass system access restrictions.

Which Chromium versions are affected?

Google Chrome versions prior to 157.0.8103.38 are affected according to the available vulnerability information. The affected Debian software entry is debian/chromium.

How severe is this issue?

Chromium rates this issue as Low severity. No further impact details, affected configuration conditions, or workaround information are provided.