DEBIAN-CVE-2026-76031: Use After Free

Published Oct 30, 2026

Updated

Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

3 affected components

debian/chromium*

Event History

Oct 30, 2026

CVE Published

via OSV·01:16 AM

Data Sourced

via OSV·01:16 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Users of Debian's chromium package are exposed when they browse to a crafted HTML page using a vulnerable Chrome version prior to 156.0.8078.79.

What does an attacker need to exploit it?

The attacker can be remote and does not need prior privileges, but user interaction is required: the victim must load a crafted HTML page.

What is the potential impact of successful exploitation?

Successful exploitation may allow arbitrary code execution inside the browser sandbox, with high confidentiality, integrity, and availability impact.

DEBIAN-CVE-2026-76031: Use After Free

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact of successful exploitation?