Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-126906 EUVD-2026-124125GHSA-q9jx-3c2v-x7j7

Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer p…

Published Nov 11, 2026 · Updated Nov 12, 2026 · Assigned by Chrome

Description

Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via crafted network traffic. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 157.0.8103.78 – < 157.0.8103.78 157.0.8103.78

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium No fix yet —
Debian 13 chromium No fix yet —
Debian 12 chromium No fix yet —

Advisories 1

References