DEBIAN-CVE-2026-121208: High severity debian/chromium vulnerability
Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to do to exploit this issue?
An attacker would need to induce a user to visit or render a crafted HTML page. No attacker privileges are required, and the issue can be reached remotely.
What security impact could successful exploitation have?
Successful exploitation could potentially allow arbitrary code execution inside the Chromium sandbox. The reported impact includes high confidentiality, integrity, and availability consequences.
Which Chromium versions are affected?
The issue affects Google Chrome versions prior to 157.0.8103.38. The provided data identifies the Debian package as chromium but does not provide the corresponding fixed Debian package version.