CVE-2026-95367

Published: Sep 29, 2026Modified: Sep 29, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html

Source: chrome-cve-admin@google.com

https://issues.chromium.org/issues/514524620

Source: chrome-cve-admin@google.com

Timeline

No history available yet.