Critical Vulnerability in Chromium Package: CVE-2026-95374
Summary
DEBIAN-CVE-2026-95374: ... Affects chromium versions 113.0.5672.126-1 – 153.0.8010.52-1~deb13u1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser developed by Google, known for its speed, simplicity, and security. It serves as the foundation for various browsers, including Google Chrome. Chromium is widely used for web browsing and supports a range of features such as extensions, sandboxing, and a robust developer toolset. However, it is susceptible to vulnerabilities that can compromise user security and privacy.
Vulnerability Detail
CVE-2026-95374 is a critical vulnerability identified in the Chromium package affecting Debian distributions. This vulnerability arises from improper handling of certain inputs, which could lead to arbitrary code execution or exposure of sensitive information. Attackers can exploit this flaw to gain unauthorized access to user data or execute malicious scripts, posing significant risks to users and their systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can disable JavaScript in their browser settings to mitigate the risk of exploitation until the package is updated. This can be done by navigating to Settings > Privacy and Security > Site Settings > JavaScript and toggling the option off.
Conclusion
CVE-2026-95374 is a significant vulnerability in the Chromium package that poses serious risks to users. It is crucial to update the package to the latest version to protect against potential exploits. Users should also consider temporary workarounds until they can apply the necessary updates.
See every vulnerability recorded for chromium →
FAQ
CVE-2026-95374 is a critical vulnerability in the Chromium package that can lead to arbitrary code execution or exposure of sensitive information.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The risks include unauthorized access to user data, execution of malicious scripts, and potential compromise of system security.
Yes, a patched version of the Chromium package is available. Users should update their packages to the latest version to mitigate the vulnerability.
If immediate updates are not possible, consider disabling JavaScript as a temporary workaround to reduce the risk of exploitation.
References
Related vulnerabilities
Recent vulnerabilities recorded for chromium.
