Critical Vulnerability in Chromium Package - CVE-2026-95284
Summary
DEBIAN-CVE-2026-95284: ... Affects chromium versions 113.0.5672.126-1 – 153.0.8010.52-1~deb13u1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser project that aims to build a safer, faster, and more stable way for all users to experience the web. It serves as the foundation for various browsers, including Google Chrome. The package is widely used across multiple Debian distributions, including Debian 12 (Bookworm), Debian 13 (Trixie), and Debian 14 (Forky). This vulnerability poses a significant risk to users relying on these versions of Chromium.
Vulnerability Detail
CVE-2026-95284 is a critical vulnerability affecting the Chromium package across multiple Debian distributions. The vulnerability originates from a flaw in the browser's rendering engine, which could allow an attacker to execute arbitrary code or cause a denial of service. This could lead to unauthorized access to sensitive information or compromise the user's system. The vulnerability is particularly concerning due to its potential to be exploited through malicious web content.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can disable JavaScript in their browser settings to mitigate the risk of exploitation until a patch is released. This can be done by navigating to the settings menu, selecting 'Privacy and Security', and then 'Site Settings' to find the JavaScript option.
Conclusion
CVE-2026-95284 is a critical vulnerability affecting the Chromium package across multiple Debian distributions. Users are urged to update their packages promptly and consider temporary workarounds to mitigate risks until a patch is available. Regular monitoring of vulnerabilities using tools like Vulert can enhance security.
See every vulnerability recorded for chromium →
FAQ
CVE-2026-95284 is a critical vulnerability in the Chromium package that could allow attackers to execute arbitrary code or cause a denial of service.
Debian 12 (Bookworm), Debian 13 (Trixie), and Debian 14 (Forky) are all affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update your package, consider disabling JavaScript as a temporary workaround to reduce the risk of exploitation.
Vulert monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json, allowing users to stay informed about potential risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for chromium.
