DEBIAN-CVE-2026-121133: Debian/chromium vulnerability
Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need before they can exploit this issue?
The attacker must already have compromised the Chrome renderer process. The described flaw is then triggered through crafted network traffic to execute code outside the renderer sandbox.
Which systems are explicitly identified as affected?
The description explicitly identifies Google Chrome on Mac before version 157.0.8103.38. The listed software entry is Debian Chromium, but the provided data does not specify affected Debian package versions or architectures.
How severe is successful exploitation?
Successful exploitation allows arbitrary code execution outside the browser sandbox after renderer compromise. Chromium rates the issue as High.