DEBIAN-CVE-2026-121254: Debian/chromium vulnerability
Published Nov 3, 2026
·Updated
Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs to get the target to process a crafted HTML page. The issue is remotely exploitable and can disclose sensitive information.
2
Which Debian Chromium versions are affected?
The available data identifies Debian's chromium package but does not provide affected or fixed Debian package versions. It only states that Google Chrome versions before 157.0.8103.38 are affected.