CVE-2026-95370 is a vulnerability in the Near Field Communication (NFC) implementation of Google Chrome before version 154.0.8037.57. The flaw allows a remote attacker to bypass system access restrictions by delivering a specially crafted HTML page. This could potentially enable unauthorized access to system resources that are normally restricted. The vulnerability has been assigned a medium severity rating by the Chromium security team. The vendor has released a stable channel update to address this issue as noted in the official Google Chrome release blog.

Successful exploitation of this vulnerability could allow a remote attacker to bypass system access restrictions on affected systems, potentially leading to unauthorized access or actions that would otherwise be blocked. The impact is limited to the scope of NFC functionality within Chrome and does not indicate broader system compromise.

Users and administrators should update Google Chrome to version 154.0.8037.57 or later, where this vulnerability has been fixed. The vendor manages remediation through official stable channel updates. No additional mitigation steps are indicated beyond applying the official update.