DEBIAN-CVE-2026-126870: Medium severity debian/chromium vulnerability
Published Nov 11, 2026
·Updated
Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The issue can be triggered remotely through a crafted HTML page, so exploitation does not require local access. A user would need to load attacker-controlled web content in an affected Chromium browser.
2
What is the security impact of successful exploitation?
A successful attack can allow reading memory outside the browser sandbox. The issue is rated High severity by Chromium.
3
Which versions are affected?
Google Chrome versions prior to 157.0.8103.78 are described as affected. The provided data identifies Debian Chromium as the affected software but does not specify the fixed Debian package version.