DEBIAN-CVE-2026-126892: Use After Free
Published Nov 11, 2026
·Updated
Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
An attacker needs to get a user to load a crafted HTML page in an affected Chromium browser. The reported code execution occurs inside the browser sandbox.
2
Which versions are affected?
Google Chrome versions prior to 157.0.8103.78 are affected. The provided data identifies Debian Chromium as the relevant software but does not specify the Debian package version containing the fix.