DEBIAN-CVE-2026-126874: High severity debian/chromium vulnerability
Published Nov 11, 2026
·Updated
Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker must cause the user to load a crafted HTML page, which can trigger arbitrary code execution inside the Chrome sandbox.
2
What level of access does successful exploitation provide?
Successful exploitation allows arbitrary code execution inside the sandbox. The provided information does not indicate that the issue enables escape from the sandbox or execution with broader system privileges.
3
Which Chromium versions are affected?
Google Chrome versions prior to 157.0.8103.78 are affected. The provided data identifies Debian's chromium package but does not provide the corresponding Debian package version.