DEBIAN-CVE-2026-126840: High severity debian/chromium vulnerability
Published Nov 11, 2026
·Updated
Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker can exploit it remotely by causing a user to process a crafted HTML page. The described code execution is inside the Chromium sandbox.
2
Which Chromium versions are affected?
Google Chrome versions prior to 157.0.8103.78 are affected according to the vulnerability description. The provided data does not identify the specific Debian package versions containing the fix.