DEBIAN-CVE-2026-126893: High severity debian/chromium vulnerability
Published Nov 11, 2026
·Updated
Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
An attacker would need to cause a user to load a crafted HTML page in an affected Chromium installation. The described impact is arbitrary code execution inside the browser sandbox.
2
Which Debian software package is identified as affected?
The affected software listed is Debian's chromium package.
3
What version should be used to remediate the issue?
The issue affects Google Chrome versions prior to 157.0.8103.78. The provided data does not state the corresponding fixed Debian chromium package version, so administrators should consult Debian's security tracker for package availability.