DEBIAN-CVE-2026-121148: Use After Free
Published Nov 3, 2026
·Updated
Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who is exposed to this issue?
Users of Debian Chromium versions prior to 157.0.8103.38 are exposed when they can be induced to load a crafted HTML page.
2
What does an attacker need to exploit it?
The attacker can be remote and does not need prior privileges, but user interaction is required to open or otherwise load the crafted HTML page.
3
What is the potential impact of successful exploitation?
Successful exploitation may allow arbitrary code execution outside the browser sandbox, with high impact to confidentiality, integrity, and availability.