DEBIAN-CVE-2026-121162: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
An attacker needs to get a user to visit a crafted HTML page and rely on social engineering to make spoofed notification-related UI appear trustworthy.
2
Which systems are explicitly identified as affected?
The available information identifies Google Chrome on Windows before version 157.0.8103.38. The listed software entry is Debian Chromium, but the provided description does not state which Debian package versions or configurations are affected.