DEBIAN-CVE-2026-121130: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Who is exposed to this issue?
Users of the Debian chromium package may be exposed if their installed Chromium version is earlier than 157.0.8103.38 and they visit an attacker-crafted HTML page.
2
What does an attacker need to exploit it?
The attacker needs to cause the target to load a crafted HTML page remotely. The available information does not indicate that local access or prior authentication is required.
3
What information could be exposed?
The issue allows sensitive information to be obtained through an observable discrepancy in Forms. The provided data does not identify the specific types of sensitive information involved.