DEBIAN-CVE-2026-121224: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must first compromise the renderer process. They can then potentially execute arbitrary code outside the sandbox using crafted network traffic.
2
Which environments are identified as affected?
The issue is described for Desktop Google Chrome on Mac prior to version 157.0.8103.38. The listed software package is Debian Chromium, but the provided data does not specify affected Debian package versions or configurations.