DEBIAN-CVE-2026-121196: Debian/chromium vulnerability
Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome on iOSto a version that resolves this vulnerability.Fixed in 157.0.8103.38
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker must cause a user to load a crafted HTML page. The issue is described as remotely exploitable; no local access requirement is stated.
Which deployments are explicitly identified as affected?
The vulnerability description explicitly identifies Google Chrome on iOS before version 157.0.8103.38. Although the record lists debian/chromium as software, the provided data does not state which Debian Chromium versions or configurations are affected.
How can I determine whether a device is affected?
Check whether the device runs Google Chrome on iOS and whether its version is earlier than 157.0.8103.38. The provided data does not include a Debian package version for determining exposure in Debian environments.