CVE-2026-95344

UNKNOWN

Description

Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. (Chromium security severity: Medium)

Timeline

Published:September 29th, 2026 6:17 PM

Last modified:September 29th, 2026 6:56 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-367

References & Reports

Advisories, patches, and third-party reports

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
https://issues.chromium.org/issues/548611433

Source: NIST NVD · Data may lag official sources by up to one minute