DEBIAN-CVE-2026-126906: Race Condition
Published Nov 11, 2026
·Updated
Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via crafted network traffic. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker must first compromise the renderer process. The described exploitation then uses crafted network traffic to obtain sensitive information.
2
Which environments are explicitly identified as affected?
The description identifies Google Chrome on Mac prior to 157.0.8103.78. The listed software package is Debian Chromium, but the provided data does not state affected Debian package versions or configurations.