CVE-2026-95382

Published: Sep 29, 2026Modified: Sep 29, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html

Source: chrome-cve-admin@google.com

https://issues.chromium.org/issues/497212105

Source: chrome-cve-admin@google.com

Timeline

No history available yet.