DEBIAN-CVE-2026-121177: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
An attacker needs to convince a user to open a crafted HTML page. The issue can then be used to spoof UI elements in PageInfo.
2
Which Chrome platform is identified as affected?
The available information identifies Google Chrome on iOS before version 157.0.8103.38. The listed software entry is Debian Chromium, but no affected Debian package version is provided.