CVEvulnerability
CVE-2026-95376
8.0 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-29
- Last modified
- 2026-10-01
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.0 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-610
Description
Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
Affected configurations
• google chrome (< 154.0.8037.57)
Related
Weakness · CWE (1)
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere weakness
References
- https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html Release Notes, Vendor Advisory
- https://issues.chromium.org/issues/513134076 Exploit, Issue Tracking, Mitigation
- https://issues.chromium.org/issues/513134076 Exploit, Issue Tracking, Mitigation