DEBIAN-CVE-2026-121210: High severity debian/chromium vulnerability
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must cause a user to interact with a crafted HTML page. Exploitation can then execute arbitrary code within the browser sandbox; no attacker privileges are required.
What systems are exposed?
Debian systems using the chromium package are affected if they run a version prior to 157.0.8103.38. The supplied data does not identify any configuration prerequisite or mitigation other than using a non-vulnerable version.
Does successful exploitation escape the browser sandbox?
The described impact is arbitrary code execution inside the sandbox. The provided information does not indicate that this vulnerability alone enables a sandbox escape or execution with host-level privileges.