← Back

CVE-2026-95376

nvd nist
Published: Sep 29, 2026Modified: Oct 1, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

Affected (1)

Products: Google: Chrome
Google
1 product
Chrome
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Chrome
Before 154.0.8037.57

Related CWEs

CWE-610
Externally Controlled Reference to a Resource in Another Sphere
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

References (3)

Source: chrome-cve-admin@google.com
Release NotesVendor Advisory
Source: chrome-cve-admin@google.com
ExploitIssue TrackingMitigation
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitIssue TrackingMitigation

Timeline

No history available yet.