Critical Vulnerability in Chromium Package Affecting Debian Releases
Summary
DEBIAN-CVE-2026-95315: ... Affects chromium versions 113.0.5672.126-1 – 153.0.8010.52-1~deb13u1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser developed by Google, known for its speed, simplicity, and security features. It serves as the foundation for various browsers, including Google Chrome. This vulnerability affects multiple Debian distributions, including Bookworm, Trixie, and Forky, potentially compromising user security and privacy.
Vulnerability Detail
The vulnerability identified as CVE-2026-95315 affects the Chromium package across several Debian versions. It originates from a flaw in the browser's handling of certain web content, which could allow an attacker to execute arbitrary code or perform unauthorized actions. The ramifications of this vulnerability could include data breaches, unauthorized access to sensitive information, and exploitation of users' systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As of now, no specific workarounds have been provided for this vulnerability. Users are advised to monitor updates from the Debian security team and apply patches as soon as they become available.
Conclusion
The CVE-2026-95315 vulnerability poses a significant risk to users of the Chromium package across various Debian distributions. It is crucial to stay informed about updates and apply patches promptly to ensure system security.
See every vulnerability recorded for chromium →
FAQ
CVE-2026-95315 is a critical vulnerability affecting the Chromium package in Debian distributions, which could allow attackers to execute arbitrary code.
The affected Debian versions include Bookworm (Debian 12), Trixie (Debian 13), and Forky (Debian 14).
You can use the Vulert platform to check for vulnerabilities in your application. Visit Vulert Scanner to analyze your manifest file without any signup.
If you cannot update immediately, it is advisable to limit your use of the Chromium browser until a patch is applied.
More information can be found in the Debian security advisories and the official CVE database.
References
Related vulnerabilities
Recent vulnerabilities recorded for chromium.
