DEBIAN-CVE-2026-126881: High severity debian/chromium vulnerability
Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Debian systems using the chromium package are the affected software identified in the available data. The issue applies to Google Chrome versions before 157.0.8103.78.
What must an attacker do to exploit it?
An attacker would need to induce a user to process a crafted HTML page remotely. Successful exploitation could potentially result in arbitrary code execution outside the browser sandbox.
How can I determine whether remediation is needed?
Check the installed Chromium version on affected Debian systems. Versions corresponding to Chrome releases earlier than 157.0.8103.78 require remediation based on the available vulnerability information.