DEBIAN-CVE-2026-121163: Input Validation
Published Nov 3, 2026
·Updated
Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What must an attacker achieve before using this issue to escape the sandbox?
The attacker must already have compromised the Chrome renderer process. The issue can then be triggered with crafted network traffic to execute arbitrary code outside the sandbox.
2
Which Chrome versions are affected?
Google Chrome versions prior to 157.0.8103.38 are affected.