DEBIAN-CVE-2026-126873: Use After Free
Published Nov 11, 2026
·Updated
Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which systems are affected by this issue?
The described exploit condition applies to Google Chrome on Windows before version 157.0.8103.78. The listed affected software is Debian's chromium package, but the provided data does not identify specific Debian package versions or configurations.
2
What does an attacker need to exploit it?
An attacker needs to convince a user to interact with a crafted HTML page. Successful exploitation can result in arbitrary code execution outside the browser sandbox.