Debian/chromium: medium 4.3
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security se
Action: Upgrade chromium to 153.0.8010.47-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 153.0.8010.47-1 | - |
Fixed versions
| 153.0.8010.47-1 |
Sources
- osv: DEBIAN-CVE-2026-87449#Debian:14/chromium
- https://security-tracker.debian.org/tracker/CVE-2026-87449
published · modified · JSON