DEBIAN-CVE-2026-121126: Use After Free
Published Nov 3, 2026
·Updated
Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs to persuade a user to load a crafted HTML page. No attacker privileges are required, and the attack can be delivered remotely.
2
What is the potential impact if exploitation succeeds?
A successful exploit could allow arbitrary code execution outside the browser sandbox. The reported impact includes compromise of confidentiality, integrity, and availability.
3
Which Chromium versions are known to be affected?
Google Chrome versions prior to 157.0.8103.38 are described as affected. The provided data identifies the Debian package as chromium but does not provide a fixed Debian package version.