DEBIAN-CVE-2026-121230: Race Condition
Published Nov 3, 2026
·Updated
Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who could exploit this issue?
A remote attacker could target a user of Debian Chromium by getting them to interact with a crafted HTML page. The attack requires no prior privileges, but it has high attack complexity and requires user interaction.
2
What is the potential impact if exploitation succeeds?
Successful exploitation could potentially allow arbitrary code execution outside Chromium's sandbox, affecting confidentiality, integrity, and availability.
3
Which Chromium versions are affected?
The issue affects Google Chrome versions prior to 157.0.8103.38. The provided data does not identify the corresponding fixed Debian Chromium package version.