Threats tagged 'ghsa-m457-wf75-q9cx'

CVE-2026-95300 is a medium severity vulnerability in Google Chrome prior to version 154.0.8037.57. It involves missing authorization checks in the DevTools component, which could allow a remote attacker to bypass system access restrictions by leveraging social engineering and crafted network traffic. The vulnerability has a CVSS score of 4.8, indicating a moderate impact on confidentiality and integrity without affecting availability. No known exploits are reported in the wild. Google has released an update to address this issue.