DEBIAN-CVE-2026-121124: High severity debian/chromium vulnerability
Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs to get a user to interact with a crafted HTML page. No attacker privileges are required, and the issue can be exploited remotely.
What is the likely impact if exploitation succeeds?
A successful exploit could allow arbitrary code execution inside the Chromium sandbox. The supplied severity vector indicates potential impact to confidentiality, integrity, and availability.
Which Chromium versions are affected?
The issue affects Google Chrome versions prior to 157.0.8103.38. The provided data identifies the affected Debian software package as chromium but does not specify Debian package versions or fixed package versions.