DEBIAN-CVE-2026-121165: Debian/chromium vulnerability
UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker needs to persuade a user to open a crafted HTML page in Chrome on Android. The issue relies on social engineering to make spoofed interface elements appear trustworthy.
Who is affected?
The described issue affects Chrome on Android prior to version 157.0.8103.38. The listed Debian software entry is chromium, but the description specifically identifies the Android mobile Chrome context.
How can I reduce risk before updating?
Because exploitation depends on a user visiting a crafted page and being socially engineered, avoid interacting with unexpected browser prompts, dialogs, or UI elements from untrusted pages. Update affected Chrome on Android installations to version 157.0.8103.38 or later when available.