DEBIAN-CVE-2026-121201: Use After Free
Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs to persuade a user to interact with a crafted HTML page. No privileges are required, and the attack can be delivered remotely over the network.
What is the impact if exploitation succeeds?
A successful exploit can execute arbitrary code inside the Chromium sandbox. The vulnerability is rated high severity with high confidentiality, integrity, and availability impact.
Which Chromium versions are affected?
Google Chrome versions prior to 157.0.8103.38 are affected according to the available vulnerability information. The provided data does not identify the corresponding fixed Debian chromium package version.
Are default Debian Chromium installations affected?
The available data identifies debian/chromium but does not state whether a particular default Debian configuration or package version is affected. Determine exposure by checking the installed Chromium version and the Debian security tracker entry.