DEBIAN-CVE-2026-121125: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What must an attacker achieve before this issue can be exploited?
The attacker must already have compromised the Chromium renderer process. They can then use a crafted HTML page to obtain sensitive information through ServiceWorker.
2
Which Chromium versions are known to be affected?
The issue affects Google Chrome versions before 157.0.8103.38. The provided data identifies Debian Chromium as the affected software but does not specify Debian package versions.