DEBIAN-CVE-2026-126859: Critical severity debian/chromium vulnerability
Published Nov 11, 2026
·Updated
Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs to persuade a user to interact with a crafted HTML page. The issue is remotely exploitable through Chrome's handling of that content.
2
What is the potential impact if exploitation succeeds?
A successful exploit can allow arbitrary code execution outside the browser sandbox.
3
Which Chromium versions are affected?
The issue affects Google Chrome versions prior to 157.0.8103.78. The provided data identifies the affected Debian software as chromium but does not specify Debian package versions.