Threats tagged 'ghsa-mvf9-p63r-q35f'

CVE-2026-95334 is a vulnerability in Google Chrome's WebProtect component prior to version 154.0.8037.57. It involves incorrect reference resolution that could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.3. Google has released an update to address this issue.