DEBIAN-CVE-2026-121207: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which systems are exposed to this issue?
The affected software identified in the available data is Debian's chromium package. The issue is described as affecting Chrome on Mac before version 157.0.8103.38, but no Debian package version range is provided.
2
What does exploitation require?
A remote attacker would need to cause a user to load a crafted HTML page. The reported impact is reading memory outside the sandbox through an uninitialized resource in Dawn.