DEBIAN-CVE-2026-121121: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What interaction is needed for exploitation?
A remote attacker needs to provide a crafted HTML page that is rendered by an affected browser. The issue is a UI spoofing problem, so the attacker’s goal is to make UI elements appear misleading to the user.
2
What upstream version includes the fix?
The issue affects Google Chrome versions before 157.0.8103.38. No Debian chromium package version is provided in the available data.