DEBIAN-CVE-2026-121175: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
The issue requires a remote attacker to deliver a crafted HTML page. The reported impact is a bypass of site isolation.
2
Which systems should be reviewed for exposure?
Review Debian systems using the chromium package, particularly where the browser version is prior to 157.0.8103.38. The available data does not state whether any particular configuration changes are required for exploitation.