DEBIAN-CVE-2026-126920: Medium severity debian/chromium vulnerability
Published Nov 11, 2026
·Updated
Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
Affected Software
4 affected components
debian/chromium*
debian/chromium*
debian/chromium*
debian/libskia*
Event History
Nov 11, 2026
CVE Published
via OSV·11:17 PM
Data Sourced
via OSV·11:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker can exploit it by convincing a user to load a crafted HTML page in an affected Chromium browser.
2
What could an attacker obtain?
The issue could allow disclosure of cross-origin data, weakening the browser's same-origin protections.
3
Which upstream Chrome versions are affected?
Google Chrome versions prior to 157.0.8103.78 are affected. The provided data does not identify the corresponding fixed Debian Chromium package version.