DEBIAN-CVE-2026-121138: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Is a fixed Debian Chromium package version identified?
No Debian package version is provided. The available information only states that Google Chrome versions before 157.0.8103.38 are affected.
2
What does exploitation require?
The issue can be exploited remotely using a crafted HTML page. The provided information does not specify any additional authentication, permissions, or configuration requirements.