DEBIAN-CVE-2026-121240: Input Validation

Published Nov 3, 2026

Updated

Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)

Affected Software

3 affected components

debian/chromium*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 157.0.8103.38

Event History

Nov 3, 2026

CVE Published

via OSV·09:17 PM

Data Sourced

via OSV·09:17 PM

DescriptionAffected Software

Frequently Asked Questions

What must an attacker do to exploit this issue?

An attacker must send crafted network traffic to a vulnerable Chromium instance. The issue is remotely exploitable and is described as allowing a bypass of system access restrictions.

Which Chromium versions are affected?

Chromium versions prior to 157.0.8103.38 are affected according to the available vulnerability data.

Is there a stated workaround if updating is not immediately possible?

No workaround or mitigation is provided in the available data. Updating to 157.0.8103.38 or later is the indicated remediation.