DEBIAN-CVE-2026-121164: Debian/chromium vulnerability

Published Nov 3, 2026

Updated

Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

3 affected components

debian/chromium*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 157.0.8103.38

Event History

Nov 3, 2026

CVE Published

via OSV·09:17 PM

Data Sourced

via OSV·09:17 PM

DescriptionAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker needs to use social engineering to get a target to interact with a crafted HTML page. The issue is described as remotely exploitable through that page.

Which systems are explicitly described as affected?

The description explicitly identifies Google Chrome on Mac versions before 157.0.8103.38. The record is associated with Debian Chromium, but the supplied data does not state which Debian Chromium versions or configurations are affected.

What version is identified as no longer affected?

For Google Chrome on Mac, the issue affects versions prior to 157.0.8103.38. The provided data does not supply a corresponding fixed Debian Chromium package version.