DEBIAN-CVE-2026-121181: Use After Free
Published Nov 3, 2026
·Updated
Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Debian software should be considered in scope?
The affected software entry is debian/chromium. The available data does not identify specific Debian package versions.
2
What must an attacker do to exploit this issue?
The attacker can be remote and does not need prior privileges, but user interaction is required. Exploitation involves getting the user to process a crafted HTML page.
3
What is the expected impact if exploitation succeeds?
A successful exploit can execute arbitrary code inside the browser sandbox. The reported severity vector rates confidentiality, integrity, and availability impact as high.