このページは Debian 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2026-17903 の詳細 →
DEBIAN-CVE-2026-17903
Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scrip...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged page via malicious network traffic. (Chromium security severity: Low)
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Debian:12
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"151.0.7922.71-1~deb12u1"}]}]
Debian:13
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"151.0.7922.71-1~deb13u1"}]}]
Debian:14
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"151.0.7922.71-1"}]}]
参照URL
- advisory security-tracker.debian.org