DEBIAN-CVE-2026-121242: Input Validation
Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker would need to deliver crafted network traffic to a vulnerable Chromium instance. The issue could allow bypassing the web origin policy.
Which deployments are affected?
The affected software entry is Debian Chromium. The vulnerability applies to Google Chrome versions prior to 157.0.8103.38; the provided data does not identify specific Debian package versions or configuration prerequisites.
Is a default configuration known to be affected?
The available information does not state whether any particular default configuration is required. It identifies the vulnerable component as WebPackaging and does not document a configuration-based mitigation.