Critical Vulnerability in Chromium Package: CVE-2026-95304
Summary
DEBIAN-CVE-2026-95304: ... Affects chromium versions 113.0.5672.126-1 – 153.0.8010.52-1~deb13u1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser project that aims to build a safer, faster, and more stable way for all users to experience the web. It serves as the foundation for several browsers, including Google Chrome. The vulnerability CVE-2026-95304 affects multiple Debian distributions, including Debian 12 (Bookworm), Debian 13 (Trixie), and Debian 14 (Forky), potentially compromising user security and privacy.
Vulnerability Detail
CVE-2026-95304 is a critical vulnerability identified in the Chromium package, which could allow attackers to execute arbitrary code or cause a denial of service. The vulnerability originates from improper handling of certain inputs, leading to potential exploitation. If successfully exploited, this vulnerability could result in unauthorized access to sensitive user data or system resources, posing significant risks to users and organizations relying on the affected versions of Chromium.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can disable certain features in Chromium that may be exploited until a patch is applied. This can be done by launching Chromium with the '--disable-features=FeatureName' flag, replacing 'FeatureName' with the specific feature that may be vulnerable. However, this is not a permanent solution and should only be used until the package is updated.
Conclusion
CVE-2026-95304 is a significant vulnerability in the Chromium package that poses serious risks to users of Debian distributions. It is crucial to update to the latest patched version to mitigate these risks. Users should also consider using Vulert to monitor for vulnerabilities in their software without needing to access the code directly.
See every vulnerability recorded for chromium →
FAQ
CVE-2026-95304 is a critical vulnerability found in the Chromium package that could allow attackers to execute arbitrary code or cause a denial of service.
The vulnerability affects Debian 12 (Bookworm), Debian 13 (Trixie), and Debian 14 (Forky).
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update immediately, consider disabling vulnerable features in Chromium as a temporary workaround until a patch is applied.
More information can be found in the official Debian security advisories and the CVE database.
References
Related vulnerabilities
Recent vulnerabilities recorded for chromium.
