Debian/chromium: high 8.8
Confused deputy in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security
Action: Upgrade chromium to 156.0.8078.47-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 156.0.8078.47-1 | - |
Fixed versions
| 156.0.8078.47-1 |
Sources
- osv: DEBIAN-CVE-2026-113152#Debian:14/chromium
- https://security-tracker.debian.org/tracker/CVE-2026-113152
published · modified · JSON