VDB
CVE-2026-95376
CVE-2026-95376
PUBLISHED
CVSS 8 HIGH
Reported by Chrome · Published September 29, 2026
Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
Risk Scores
CVSS 3.1
8
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chrome | 154.0.8037.57 | |
| Chrome | 154.0.8037.57 | |
| wolfi | chromium | 0 |
| chainguard | chromium | 0 |
Timeline
- Sep 29, 2026 CVE Published
- Sep 30, 2026 EPSS Score
- Sep 30, 2026 CVE Updated
- Oct 1, 2026 EPSS Score
- Oct 2, 2026 EPSS Score
- Oct 7, 2026 EPSS Score
- Oct 13, 2026 EPSS Score
- Oct 19, 2026 EPSS Score
- Oct 25, 2026 EPSS Score