DEBIAN-CVE-2026-121197: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which systems are exposed to this issue?
The affected software identified in the data is Debian's chromium package. The issue applies to Google Chrome on Mac before 157.0.8103.38, but the provided data does not state which Debian chromium versions or configurations are affected.
2
What must an attacker do to exploit it?
An attacker would need to induce the target to process a crafted HTML page remotely. Successful exploitation can read memory outside the sandbox.