DEBIAN-CVE-2026-126907: Debian/chromium vulnerability
Uninitialized resource in Media in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
What would an attacker need before this issue could be exploited?
The attacker would first need to compromise the Chrome renderer process. The issue can then be triggered using a crafted HTML page.
Which systems are identified as affected?
The description identifies Google Chrome on Windows prior to version 157.0.8103.78. The listed software entry is debian/chromium, but the provided description does not establish which Debian Chromium versions or configurations are affected.
What is the potential impact after exploitation?
A compromised renderer process could potentially read memory outside the sandbox. The issue is rated High by Chromium security.