DEBIAN-CVE-2026-121233: High severity debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Does exploitation require an attacker account or elevated privileges?
No. The vector indicates no privileges are required, but exploitation requires user interaction with a crafted HTML page delivered over the network.
2
What level of impact is indicated if exploitation succeeds?
The issue can allow arbitrary code execution inside the sandbox. The provided severity vector rates confidentiality, integrity, and availability impact as high.
3
Are Debian-specific fixed package versions available?
No fixed Debian Chromium package version is provided in the available data. The issue is described as affecting Google Chrome before 157.0.8103.38, but that does not establish the corresponding Debian package version.