CVE-2026-95328: Confused deputy in Google Chrome
CVE-2026-95328 is a low-severity confused deputy vulnerability in Google Chrome on Android versions prior to 154.0.8037.57. It allows a local attacker, using social engineering and a co-installed app, to obtain sensitive information. The issue affects mobile Chrome on Android and was publicly disclosed with a vendor advisory from Google.
AI Analysis
Technical Summary
This vulnerability involves a confused deputy flaw in the mobile version of Google Chrome on Android devices before version 154.0.8037.57. A local attacker leveraging social engineering techniques and a co-installed application can exploit this flaw to access sensitive information. The Chromium security team has classified this issue as low severity. The vulnerability was published on September 29, 2026, and Google has issued a stable channel update addressing this issue.
Potential Impact
An attacker with local access and a co-installed app can exploit this vulnerability to obtain sensitive information from the affected Chrome browser on Android. The impact is limited by the requirement for local presence and social engineering, and the severity is rated low by the vendor.
Mitigation Recommendations
Google has released an official fix in Chrome version 154.0.8037.57. Users should update their Chrome browser on Android to version 154.0.8037.57 or later to remediate this vulnerability. Refer to the Google Chrome stable channel update advisory for details.
CVE-2026-95328: Confused deputy in Google Chrome
Description
CVE-2026-95328 is a low-severity confused deputy vulnerability in Google Chrome on Android versions prior to 154.0.8037.57. It allows a local attacker, using social engineering and a co-installed app, to obtain sensitive information. The issue affects mobile Chrome on Android and was publicly disclosed with a vendor advisory from Google.
Affected software
Chrome
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a confused deputy flaw in the mobile version of Google Chrome on Android devices before version 154.0.8037.57. A local attacker leveraging social engineering techniques and a co-installed application can exploit this flaw to access sensitive information. The Chromium security team has classified this issue as low severity. The vulnerability was published on September 29, 2026, and Google has issued a stable channel update addressing this issue.
Potential Impact
An attacker with local access and a co-installed app can exploit this vulnerability to obtain sensitive information from the affected Chrome browser on Android. The impact is limited by the requirement for local presence and social engineering, and the severity is rated low by the vendor.
Mitigation Recommendations
Google has released an official fix in Chrome version 154.0.8037.57. Users should update their Chrome browser on Android to version 154.0.8037.57 or later to remediate this vulnerability. Refer to the Google Chrome stable channel update advisory for details.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-09-22T05:09:11.481Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","vendor":"Google"}]
Threat ID: 6abbf87b57f14566d451c83e
Added to database: 09/29/2026, 17:42:19 UTC
Last enriched: 09/29/2026, 18:04:42 UTC
Last updated: 09/29/2026, 18:04:42 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.