Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-95326

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker…

Risk score
54/100
CVSS
8.4 v3.1
Exploit chance (30 days)
0.3%
Published
29 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Affected
Chrome before 154.0.8037.57
Fix
Upgrade Chrome to 154.0.8037.57 or later.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 8.4 high

References

Original description

Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

Last activity 29 Sep 2026. Patch Forecast updates every hour.