DEBIAN-CVE-2026-121232: Debian/chromium vulnerability
Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 157.0.8103.38
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
The issue affects Debian systems using Chromium versions prior to 157.0.8103.38, where a relevant co-installed application is present. Exploitation also requires a local attacker to use social engineering.
What access and conditions does an attacker need?
An attacker needs local access and must successfully leverage social engineering. The described attack path also depends on a co-installed app.
What is the remediation?
Update Chromium to version 157.0.8103.38 or later. The available information does not specify a workaround for systems that cannot yet be updated.