CVE-2026-95376
Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an…
- Risk score
- 55/100
- CVSS
- 8.0 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 29 Sep 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
- Affected
- Chrome before 154.0.8037.57
- Fix
- Upgrade Chrome to 154.0.8037.57 or later.
- Exploitation
- Public proof of concept
Why it is Yellow
- CVSS 8.0 high
- Public exploit or proof of concept referenced
References
Original description
Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
Last activity 29 Sep 2026. Patch Forecast updates every hour.