CVE-2026-95376

Published: Set 29, 2026 Last Modified: Set 29, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

610

Externally Controlled Reference to a Resource in Another Sphere

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Access Control
Potential Impacts:
Read Application Data Modify Application Data Gain Privileges Or Assume Identity
Applicable Platforms
All platforms may be affected
View CWE Details
https://chromereleases.googleblog.com/2026/09/stable-channe…
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop…
https://issues.chromium.org/issues/513134076
https://issues.chromium.org/issues/513134076