DEBIAN-CVE-2026-121200: Critical severity debian/chromium vulnerability
Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must persuade a user to interact with a crafted HTML page. The attack can be delivered remotely and does not require attacker authentication or privileges.
What is the potential impact if exploitation succeeds?
Successful exploitation could allow arbitrary code execution outside the browser sandbox. The listed vector indicates high potential impact to confidentiality, integrity, and availability.
Which Chromium versions are affected?
The issue affects Google Chrome versions prior to 157.0.8103.38. The provided data identifies Debian's chromium package but does not specify the corresponding fixed Debian package version.