Vulnerability Details CVE-2026-95368
Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 4.3