Critical Vulnerability in Chromium Package: CVE-2026-95347
Summary
DEBIAN-CVE-2026-95347: ... Affects chromium versions 113.0.5672.126-1 – 153.0.8010.52-1~deb13u1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser developed by Google, known for its speed, simplicity, and security features. It serves as the foundation for various browsers, including Google Chrome. The package is widely used across different operating systems, including Debian. However, recent findings have revealed a critical vulnerability (CVE-2026-95347) that affects multiple versions of Chromium in Debian distributions, posing potential security risks to users.
Vulnerability Detail
CVE-2026-95347 is a vulnerability identified in the Chromium package that allows for potential exploitation, leading to unauthorized access or manipulation of user data. The vulnerability originates from a flaw in the browser's handling of certain web content, which could be exploited by attackers to execute arbitrary code or perform actions on behalf of the user without their consent. This vulnerability affects Debian versions 12 (bookworm), 13 (trixie), and 14 (forky), and it is crucial for users to address this issue promptly to mitigate risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable JavaScript in their browser settings to reduce the risk of exploitation until the package is updated. This can be done by navigating to Settings > Privacy and Security > Site Settings > JavaScript and toggling it off.
Conclusion
The CVE-2026-95347 vulnerability in the Chromium package poses significant risks to users of Debian distributions. It is essential to update the package to the latest version to protect against potential exploits. Users are encouraged to monitor their systems for vulnerabilities using tools like Vulert, which can alert them in real-time without requiring code access.
See every vulnerability recorded for chromium →
FAQ
CVE-2026-95347 is a critical vulnerability found in the Chromium package that could allow attackers to execute arbitrary code.
The vulnerability affects Debian versions 12 (bookworm), 13 (trixie), and 14 (forky).
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
As a temporary measure, you can disable JavaScript in your browser settings to minimize risk until you can apply the update.
More information can be found in the official Debian security advisories and the vulnerability database.
References
Related vulnerabilities
Recent vulnerabilities recorded for chromium.
