DEBIAN-CVE-2026-121209: Debian/chromium vulnerability
UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Debian's Chromium who visit a crafted HTML page are exposed. Exploitation is remote and relies on convincing a user to load attacker-controlled web content.
What does an attacker need to exploit it?
The attacker needs to deliver a crafted HTML page to a Chromium user. The issue enables address-bar spoofing through UI misrepresentation; the provided data does not indicate any additional privileges or local access requirements.
What version resolves the issue?
Google Chrome versions prior to 157.0.8103.38 are affected according to the advisory description. The provided data does not identify the corresponding fixed Debian Chromium package version.