DEBIAN-CVE-2026-126905: High severity debian/chromium vulnerability
Published Nov 11, 2026
·Updated
Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker would need to induce the target to process a crafted HTML page remotely. Successful exploitation could allow arbitrary code execution inside the Chromium sandbox.
2
Which Debian software is identified as affected?
The affected software listed is Debian's chromium package. The provided information does not identify specific Debian package versions or fixed versions.
3
Does this vulnerability allow code execution outside the browser sandbox?
The available information describes potential arbitrary code execution inside the sandbox only. It does not state that the vulnerability escapes the sandbox or compromises the underlying system.